On Tue, 22 Feb 2000, Pavel Machek wrote:
> If capabilities are not present on ISO, how are you going to install
> your system. If you don't have capabilities on NFS, how secure are
> your workstations going to be?
Simple, the install kernel is special and runs the entire install process
with full caps.
If you don't have caps on NFS you'll be real secure, as nothing on NFS
will run with extra privs, SUID on NFS is a security sin in most
enviroments.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Wed Feb 23 2000 - 21:00:30 EST