Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

[Mike Frysinger <vapier@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1065 bytes --]

On Monday 24 March 2008, Alon Bar-Lev wrote:
> On 3/24/08, Mike Frysinger <vapier@gentoo.org> wrote:
> > Diego and i were talking ... we're going to go with USE=filecaps because
> > it's so new and doesnt require the libcap library in order to work at
> > runtime. probably be worthwhile to put together a little eclass of
> > functions to make people's lives easier ...
>
> Great!!!
> You write eclass, me start patching ebuilds and open bugs against
> maintainers :)

eclass wrapping will also allow us to abstract away the fun OS details, but 
we'll start with linux for now.

how much do we want to help the user ?  if they have USE=filecaps, then dont 
perform any checking ?  we'll need a kernel with file capabilities turned on, 
otherwise the prog wont work unless it's setuid ... so do we perform checking 
and drop the setuid bit on the post sly ?  i'd prefer we just make the 
filecaps desc verbose: dont set this unless you have new enough kernel with 
options enabled, otherwise things may stop working properly as non-root.
-mike

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 827 bytes --]