[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201001111007.EAG82373.VHFQSLFOFMOOJt@I-love.SAKURA.ne.jp>
Date: Mon, 11 Jan 2010 10:07:53 +0900
From: Tetsuo Handa <penguin-kernel@...ove.SAKURA.ne.jp>
To: michael@...top.org
Cc: pavel@....cz, linux-kernel@...r.kernel.org, netdev@...r.kernel.org,
linux-security-module@...r.kernel.org, andi@...stfloor.org,
david@...g.hm, socketcan@...tkopp.net, alan@...rguk.ukuu.org.uk,
herbert@...dor.apana.org.au, Valdis.Kletnieks@...edu,
bdonlan@...il.com, zbr@...emap.net, cscott@...ott.net,
jmorris@...ei.org, ebiederm@...ssion.com, bernie@...ewiz.org,
mrs@...hic-beasts.com, randy.dunlap@...cle.com,
xiyou.wangcong@...il.com, penguin-kernel@...ove.sakura.ne.jp,
sam@...ack.fr, casey@...aufler-ca.com, serue@...ibm.com,
viro@...IV.linux.org.uk
Subject: Re: [PATCH 2/3] Security: Implement disablenetwork semantics. (v4)
Michael Stone wrote:
> Examples of software that I want to be able to gain privileges normally include:
>
> rainbow, which requires privilege in order to add new accounts to the system
> and in order to call setuid() but which does not require networking
> privileges.
If the system is not using local files (i.e. /etc/passwd and /etc/shadow),
the process who wants to add new accounts to the system might need network
access (e.g. to LDAP server), doesn't it?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists