On 11/1/07, Casey Schaufler <casey@schaufler-ca.com> wrote:
Posix file capabilities the option to replace SUID bit with something
more security safe only handing out segments of root power instead of
the complete box and dice like SUID. Even different on a user by user
base.
Posix capabilites is what Posix file capabilities is based on. Yes I
know the words appear close. The word file is important. Please read
Website. http://www.ibm.com/developerworks/linux/library/l-posixcap.html
IBM coders worked and got it into the main line really recently to
provide at least some way to avoid fault of SUID of course it could
still be made better. I would have though being a important problem
that other LSM guys would have done it first. So door to add new
features to kernel is open past any question. Of course the features
have to be for everyones good.
Andrew Morgan Posix capabilities is something far older its been there
for ages pre selinux the correct fix to SUID for everyone has always
been there by extending Andrew Morgan's work. So I will ask again why
did IBM have to do Posix file capabilities instead of Selinux.
Selinux has had 7+ years to do it.
Thank you for proving my point past question Casey Schaufler. You
don't have a single clue of the alterations happing to the main
security model so there is every chance you will overlap with it.
Please get you tech right. How many other holes are sitting open
because you patch them at LSM level and don't look down into default
security system to see if it should be fixed there.
That is no explanation to why the default security frame work is being
neglected. I don't have all the answers. It does not take a person
that high so see that LSM is a screwup leading to people being out of
touch with the main security model and its neglect. It should not be
requiring outside parties to fix things that in the main security
model. Only way that can be happening is if LSM is dysfunctional. 7+
year fault at min is not what you can call someone fixing a new fault.
Now how are we going to fix the mess of LSM's to work correctly for
the good of linux.
One way is appoint one hard minded maintainer that is above my rights.
This is above me doing code. No matter how many fixes I do to the
core that will not fix dysfunction in the LSM section. Strict
policies on fixing the main security model will be required.
Peter Dolding
-
