A simple lsm

From: Sten Spans (sten@private)
Date: Fri Feb 18 2005 - 03:10:35 PST

Previous message: Valdis.Kletnieks@private: "Re: Thoughts on the "No Linux Security Modules framework" old claims"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

I've created a simple lsm based on the realtime lsm
which relaxes seteuid/setegid permissions for a certain
uid/gid.

I use this code to do uid/gid switching in
apache without suexec/root privileges.

source :
http://viewcvs.blinkenlights.nl/index.cgi/apache/kernel/linux/


comments/suggestions welcome.

-- 
Sten Spans

"There is a crack in everything, that's how the light gets in."
Leonard Cohen - Anthem

Previous message: Valdis.Kletnieks@private: "Re: Thoughts on the "No Linux Security Modules framework" old claims"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Fri Feb 18 2005 - 03:11:28 PST