36 messages in org.freebsd.freebsd-securityRe: Security Model/Target for FreeBSD...| From | Sent On | Attachments |
|---|---|---|
| Colman Reilly | Jul 5, 1997 3:43 am | |
| Adam Shostack | Jul 5, 1997 8:17 am | |
| Colman Reilly | Jul 5, 1997 2:33 pm | |
| Jordan K. Hubbard | Jul 5, 1997 4:47 pm | |
| Christopher Petrilli | Jul 6, 1997 11:27 am | |
| Jonathan M. Bresler | Jul 6, 1997 2:50 pm | |
| Brian Mitchell | Jul 6, 1997 3:20 pm | |
| Jonathan M. Bresler | Jul 6, 1997 5:13 pm | |
| Colman Reilly | Jul 7, 1997 1:45 am | |
| Duane H. Hesser | Jul 7, 1997 7:48 am | |
| Robert N Watson | Jul 7, 1997 10:08 am | |
| Brian Mitchell | Jul 7, 1997 10:58 am | |
| Adam Shostack | Jul 7, 1997 11:03 am | |
| Sean Eric Fagan | Jul 7, 1997 11:37 am | |
| Robert N Watson | Jul 7, 1997 11:46 am | |
| Jonathan M. Bresler | Jul 7, 1997 11:53 am | |
| Robert Watson | Jul 7, 1997 1:04 pm | |
| Kenneth Stailey | Jul 7, 1997 1:05 pm | |
| Brian Mitchell | Jul 7, 1997 1:38 pm | |
| pro...@suburbia.net | Jul 7, 1997 2:29 pm | |
| Jim Shankland | Jul 7, 1997 3:46 pm | |
| Daniel O'Callaghan | Jul 7, 1997 4:20 pm | |
| Mark Newton | Jul 7, 1997 4:47 pm | |
| Adam Shostack | Jul 7, 1997 5:58 pm | |
| Adam Shostack | Jul 7, 1997 6:09 pm | |
| Poul-Henning Kamp | Jul 7, 1997 11:10 pm | |
| Robert Watson | Jul 8, 1997 8:45 am | |
| Robert Watson | Jul 8, 1997 8:58 am | |
| Colman Reilly | Jul 8, 1997 12:33 pm | |
| Ollivier Robert | Jul 8, 1997 1:20 pm | |
| George Robbins | Jul 8, 1997 1:59 pm | |
| Mark Newton | Jul 8, 1997 5:29 pm | |
| Robert Watson | Jul 9, 1997 9:09 am | |
| Eivind Eklund | Jul 9, 1997 9:57 am | |
| David Holland | Jul 9, 1997 3:09 pm | |
| Wes Peters | Jul 9, 1997 10:07 pm |
| Subject: | Re: Security Model/Target for FreeBSD or 4.4? | |
|---|---|---|
| From: | Brian Mitchell (bri...@firehouse.net) | |
| Date: | Jul 7, 1997 1:38:40 pm | |
| List: | org.freebsd.freebsd-security | |
On Mon, 7 Jul 1997, Robert Watson wrote:
On a related note, has anyone given any thought to making chroot() a user-accessible call? I haven't really looked at it, so am not sure why it can only be called by uid root programs. In terms of sandboxing (which seems to be popular these days for various applications), it would be nice to restrict programs to specific regions of the disk, etc. Especially if you are a non-root user developing programs that require special libraries, etc. Or if you want to run a restricted web or ftp server, but don't have root access (as hopefully would be the case with the lighter restrictions on binding ports <1024.)
picture this, /usr/home is the same fs as /usr/bin - you create a reasonable tree with its own passwd file, you populate your usr/bin with hardlinks, you chroot and run su
su will read your passwd file, giving you root. you create a setuid shell or something similar and then log out of the shell and go back to the nonchrooted environment and run the suid root shell.
Brian Mitchell bri...@firehouse.net "BSD code sucks. Of course, everything else sucks far more." - Theo de Raadt