Re: Security Hole in Axent ESM

From: Patrick (patrickat_private)
Date: Wed Sep 02 1998 - 11:50:57 PDT

  • Next message: Ulf Munkedal: "Re: Borderware predictable initial TCP"

    > Yes. Process capability restrictions. CAP_TIME or something like that could
    > be easily implemented.
    
    Looks like it already has.  (Except that capabilities still aren't in the
    ext2 code of mainstream kernels, are they?)
    
    Look in kernel 2.1.119 at include/linux/capability.h, lines 246-250 and
    kernel/time.c, lines 155-160.
    
    --Patrick
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:14:50 PDT