Capabilities mostly useless
Posted Apr 8, 2004 21:45 UTC (Thu) by
Ross (subscriber, #4065)
Parent article:
Capabilities in 2.6
The whole capability system is not very fine grained. In fact, all
capabilities are all super-user privileges. The ability to lock up the
system or escalate priviledges is highly likely if any of the capabilities
are granted. And some of them like CAP_SYS_ADMIN are grab-bags of
unrelated priviledges. Why can't some normal user priviledges be worked
into the scheme CAP_LISTEN, CAP_CONNECT, CAP_PTRACE,
CAP_EXECSUID, CAP_USRCHOWN, CAP_USRCHMOD, etc.? With these
I could actually use capabilities to harden systems. As they are I can
only lock down the root account which isn't too useful when nothing runs as
root anyway.
(
Log in to post comments)
