Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S262334AbVBCDzh (ORCPT ); Wed, 2 Feb 2005 22:55:37 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262395AbVBCDzg (ORCPT ); Wed, 2 Feb 2005 22:55:36 -0500 Received: from mail.joq.us ([67.65.12.105]:53157 "EHLO sulphur.joq.us") by vger.kernel.org with ESMTP id S262353AbVBCDz1 (ORCPT ); Wed, 2 Feb 2005 22:55:27 -0500 To: Peter Williams Cc: Paul Davis , "Bill Huey (hui)" , Ingo Molnar , Nick Piggin , Con Kolivas , linux , rlrevell@joe-job.com, CK Kernel , utz , Andrew Morton , alexn@dsv.su.se, Rui Nuno Capela , Chris Wright , Arjan van de Ven Subject: Re: [patch, 2.6.11-rc2] sched: RLIMIT_RT_CPU_RATIO feature References: <200502022303.j12N3nZa002055@localhost.localdomain> <42016661.80908@bigpond.net.au> <87d5viigyo.fsf@sulphur.joq.us> <42019633.80803@bigpond.net.au> From: "Jack O'Quin" Date: Wed, 02 Feb 2005 21:56:02 -0600 In-Reply-To: <42019633.80803@bigpond.net.au> (Peter Williams's message of "Thu, 03 Feb 2005 14:10:43 +1100") Message-ID: <878y66wb3h.fsf@sulphur.joq.us> User-Agent: Gnus/5.1006 (Gnus v5.10.6) XEmacs/21.4 (Corporate Culture, linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 926 Lines: 25 > Jack O'Quin wrote: >> Temporarily dropping privileges gains no security whatsoever. It is >> nothing more than a coding convenience. Peter Williams writes: > Yes, to help avoid accidentally misusing the privileges. >> The program remains *inside* the system security perimeter. > > Which is why you have to be careful in writing setuid programs. Which is why I'd rather not run an inherently insecure program like jackd with root privileges. I can live with a cracker crashing my audio workstation with a DoS attack using realtime privileges. I'll just have to reboot. But, I do not want him turning my mail server into a spam relay. -- joq - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/