Date: Sun, 17 Aug 2003 14:13:15 -0400 From: ari <edelkind-freebsd-hackers@episec.com> To: freebsd-hackers@freebsd.org Subject: [future patch] dropping user privileges on demand Message-ID: <20030817181315.GL55671@episec.com>
next in thread | raw e-mail | index | archive | help
Currently, root is the only user that can actually drop significant
privileges, as root is the only user that has access to such functions.
This is flawed --- any user should be able to relinquish his privileges,
and i've begun a patch to put this into effect.
However, the fact that this is a security-related kernel feature
modification warrants peer-review, in both design and implementation.
It would be unwise of me to create the patch without consulting such.
The web page that discusses the patch may be found at:
http://www.episec.com/people/edelkind/patches/kernel/flowpriv/
I welcome any discussion and criticism.
ari
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030817181315.GL55671>