Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Alan Coopersmith (alanc@fosstodon.org)'s status on Thursday, 02-May-2024 02:45:23 JST Alan Coopersmith

When Casper was designing the rough equivalent in #Solaris, the least privilege system, he tried to prevent this. For instance, PRIV_FILE_DAC_WRITE won’t let you write to a file owned by UID 0 unless your euid is 0 or you already have all privileges (equivalent to root access).
https://mastodon.social/@vegard/112365131001894332
In conversation about a year ago from fosstodon.org permalink
Attachments
1. No result found on File_thumbnail lookup.
  
  Vegard Nossum (@vegard@mastodon.social)
  
  from Vegard Nossum
  
  Good comment describing how various CAP_* are de facto equivalent to root: https://lwn.net/Articles/971891/ This is not news, of course, but it's interesting to see it spelled out. Are there other pages/lists like this? Maybe even a cap-to-root script/program..? #LinuxKernel #LinuxSecurity #infosec
- Haelwenn /элвэн/ :triskell: likes this.

Feeds