On Fri, 14 Mar 1997, Peter da Silva wrote:
> > It seems to me that this would be a lot more useful if there
> > was an 'exec' group on the system. Requiring code that forks to run
> > as root means you can't play some of the least privilege cards.
>
> That shouldn't be too difficult, and you could set the "exec" group with
> a sysctl call in BSD.
How would this idea be implemented? Is it a kernel thing or what?
--
William Burrow -- Fredericton Area Network, New Brunswick, Canada
Copyright 1997 William Burrow
"Well, let's just say, 'if your VCR is still blinking 12:00, you don't
want Linux'". --Bruce Perens, Debian's Fearless Leader
References:
|
|
