User: Password:
|
|
Subscribe / Log in / New account

A bid to resurrect Linux capabilities

A bid to resurrect Linux capabilities

Posted Sep 25, 2006 8:21 UTC (Mon) by cras (guest, #7000)
In reply to: A bid to resurrect Linux capabilities by slamb
Parent article: A bid to resurrect Linux capabilities

But locking down ptrace() might be a good way to prevent an exploited connection from messing with another one in forked servers. I think the only other way would be to bind as root, then setuid() to one of a pool of uids or something...I hope no one's doing that
A pool of UIDs is not required, just doing setuid() after exec() will make the kernel think the process is in "setuid state" and won't allow other processes ptrace it.


(Log in to post comments)


Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds