Linux setuid bug

[Jacques Richer <jpricher@ix.netcom.com>]

It didn't look like they did _anything_ to the code beyond the changes
needed for "flask". I think this was a very clear decision on their
part.
On the other hand, using domains and roles to control process privilege
could potentially make the setuid() bug more of a bother than a major
hole.

(This does _not_ imply that I believe it should not be fixed. It clearly
needs to
happen. This is probably the reason behind the push to update their code
for a
newer operating system kernel...)

                                                Jacques Richer



You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.