[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 27 Feb 2013 12:06:14 -0500
From: Rich Felker <dalias@...ifal.cx>
To: musl@...ts.openwall.com
Subject: Re: shadow.h
On Wed, Feb 27, 2013 at 06:04:08PM +0100, Daniel Cegiełka wrote:
> 2013/2/27 Rich Felker <dalias@...ifal.cx>:
>
> >>
> >> I prefer tcb, but the current implementation in musl isn't as
> >> functional as owl's (privilege separation):
> >
> > Can you explain this better?
>
> Owl's tcb uses SGID instead SUID, so SUID is not needed for programs
> like passwd. Here is a good presentation:
>
> http://www.openwall.com/presentations/Owl/mgp00020.html
This has nothing to do with the interfaces in libc, which do not
modify any tcb data. They only read it and they work with whichever
privilege model you prefer.
Rich
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
