Subject: Re: RFC: disablenetwork facility. (v4)

From: Pavel Machek <[email-masked]>
Date: Mon, 28 Dec 2009 21:55:11 +0100

On Mon 2009-12-28 09:37:24, [email-masked] wrote:
> On Mon, 28 Dec 2009 11:10:06 +0100, Pavel Machek said:
> 
> > a) make disablenetwork reset to "enablenetwork" during setuid exec
> 
> That won't work either.  If you only make it 'setuid==0' binaries, you still
> break 'setuid-FOO' binaries that require the net. If you just check the setuid
> bit, it allows a trivial escape by creating a setuid-yourself binary and using
> that to exec something else (now with network access, because we apparently
> don't have a way to remember the previous setting).

it is really only required for binaries setuid to someone else, but
that would be too ugly. (Plus, as someone said, ping is great for
leaking data out.)

									Pavel
-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html