Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758223AbXIFPLb (ORCPT ); Thu, 6 Sep 2007 11:11:31 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1756627AbXIFPLZ (ORCPT ); Thu, 6 Sep 2007 11:11:25 -0400 Received: from mail.fieldses.org ([66.93.2.214]:46726 "EHLO fieldses.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753750AbXIFPLY (ORCPT ); Thu, 6 Sep 2007 11:11:24 -0400 Date: Thu, 6 Sep 2007 11:11:18 -0400 To: Satyam Sharma Cc: Trond Myklebust , Jan Engelhardt , Linux Kernel Mailing List Subject: Re: NFS4 authentification / fsuid Message-ID: <20070906151118.GB28565@fieldses.org> References: <1188484155.6755.38.camel@heimdal.trondhjem.org> <1188484337.6755.41.camel@heimdal.trondhjem.org> <1188486240.6755.51.camel@heimdal.trondhjem.org> <20070830214431.GF10808@fieldses.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.16 (2007-06-11) From: "J. Bruce Fields" Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 772 Lines: 16 On Thu, Sep 06, 2007 at 01:59:50PM +0530, Satyam Sharma wrote: > Oh and btw, note that we're talking of the (lack of) security of a > "running kernel" here -- because across reboots, there is /really/ > *absolutely* no such thing as "kernelspace security" because the superuser > will simply switch the vmlinuz itself ... Well, the machine could be booting from cdrom, and could live in a locked machine room. Or people with root on a virtual host don't necessarily have the ability to replace the kernel for that host. --b. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/