Re: [PATCH] more SAK stuff

From: Andries.Brouwer@cwi.nl
Date: Mon Jul 02 2001 - 07:49:11 EST


>> (a) It does less, namely will not kill processes with uid 0.
>> Ted, any objections?

Alan:

> That breaks the security guarantee. Suppose I use a setuid app to confuse
> you into doing something ?

You confuse me? Unlikely :-)

Indeed, discussion is possible. I think my version is more secure
and more useful, but if you disagree, delete the lines
                /* do not kill root processes */
                if (p->uid == 0)
                        continue;

Andries
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Jul 07 2001 - 21:00:10 EST