Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges

[David Wagner]

Alan Cox  wrote:
>Removing specific features from a specific piece of code
>generally isn't a security feature -

You lost me there.  The ability of a specific piece of code to voluntarily
relinquish privileges can be a big benefit to security.  It enables
privilege-separated software architectures, which are a powerful way to
reduce risk.  That's the motivation for the disablenetwork proposal that
has stimulated all this discussion.  I hope this is obvious?  Does it
need elaboration?
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/