Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1760224AbYBGOFr (ORCPT ); Thu, 7 Feb 2008 09:05:47 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1758513AbYBGOF2 (ORCPT ); Thu, 7 Feb 2008 09:05:28 -0500 Received: from e6.ny.us.ibm.com ([32.97.182.146]:53547 "EHLO e6.ny.us.ibm.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758211AbYBGOFZ (ORCPT ); Thu, 7 Feb 2008 09:05:25 -0500 Date: Thu, 7 Feb 2008 08:05:21 -0600 From: "Serge E. Hallyn" To: Miklos Szeredi Cc: serue@us.ibm.com, akpm@linux-foundation.org, hch@infradead.org, linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [patch 07/10] unprivileged mounts: add sysctl tunable for "safe" property Message-ID: <20080207140521.GC4058@sergelap.austin.ibm.com> References: <20080205213616.343721693@szeredi.hu> <20080205213705.120219893@szeredi.hu> <20080206202110.GA20528@sergelap.ibm.com> <20080206224527.GB24246@sergelap.austin.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.16 (2007-06-09) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1340 Lines: 35 Quoting Miklos Szeredi (miklos@szeredi.hu): > > > Maybe sysctls just need to check capabilities, instead of uids. I > > > think that would make a lot of sense anyway. > > > > Would it be as simple as tagging the inodes with capability sets? One > > set for writing, or one each for reading and writing? > > Yes, or something even simpler, like mapping the owner permission bits > to CAP_SYS_ADMIN. There seem to be very few different permissions > under /proc/sys: > > --w------- > -r--r--r-- > -rw------- > -rw-r--r-- > > As long as the group and other bits are always the same, and we accept > that the owner bits really mean CAP_SYS_ADMIN and not something else, But I would assume some things under /proc/sys/net/ipv4 or /proc/sys/net/ath0 require CAP_NET_ADMIN rather than CAP_SYS_ADMIN? > then the permission check would not need to look at uids or gids at > all. > > Miklos > - > To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/