From: Michael <michael@kmaclub.com>
To: mschwarz@multitool.net
Cc: Ian Dall <ian@beware.dropbear.id.au>, linux-raid@vger.kernel.org
Subject: Re: Behavior of mdadm depending on user
Date: Tue, 03 Jul 2007 10:28:54 -0700 [thread overview]
Message-ID: <468A8756.4070606@kmaclub.com> (raw)
In-Reply-To: <2077.72.21.237.163.1183481595.squirrel@www.multitool.net>
Michael Schwarz wrote:
> The problem with that approach is that it opens up the applications in
> question to *any parameters* unlike the setuid C program which hardcodes the
> parameters to the commands.
>
>
Take a look at the man page for sudo. It can limit which parameters can
be used. You can restrict it so that they can not execute commands with
arbitrary arguments.
Michael
prev parent reply other threads:[~2007-07-03 17:28 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-07-03 2:10 Behavior of mdadm depending on user Michael Schwarz
2007-07-03 12:40 ` Ian Dall
2007-07-03 16:53 ` Michael Schwarz
2007-07-03 17:28 ` Michael [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=468A8756.4070606@kmaclub.com \
--to=michael@kmaclub.com \
--cc=ian@beware.dropbear.id.au \
--cc=linux-raid@vger.kernel.org \
--cc=mschwarz@multitool.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox