[EMAIL PROTECTED] (Linus Torvalds) wrote on 27.08.00 in
<[EMAIL PROTECTED]>:
> On Sun, 27 Aug 2000, Alexander Viro wrote:
> >
> > Linus, there is no need in new mask for execve().
>
> What you're saying is "there are other ways to accomplish this". And I
> kind of agree. I still think the dynamic mask is the preferable option.
>
> > We have two actions:
> > 1. create a VM set up according to the contents of binary
>
> Sure. Another ELF marker, whatever. It would work, and probably cover the
> needs. Especially as "the needs" aren't that big, as this has actually
> never come up except as a theoretical discussion ;).
Just don't forget that some of this unsharing may be necessary for
security reasons. Specifically, when you execve() a suid program, you
probably should automatically unshare everything.
MfG Kai
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/
