Linux RAID subsystem development
 help / color / mirror / Atom feed
From: Michael <michael@kmaclub.com>
To: mschwarz@multitool.net
Cc: Ian Dall <ian@beware.dropbear.id.au>, linux-raid@vger.kernel.org
Subject: Re: Behavior of mdadm depending on user
Date: Tue, 03 Jul 2007 10:28:54 -0700	[thread overview]
Message-ID: <468A8756.4070606@kmaclub.com> (raw)
In-Reply-To: <2077.72.21.237.163.1183481595.squirrel@www.multitool.net>

Michael Schwarz wrote:
> The problem with that approach is that it opens up the applications in
> question to *any parameters* unlike the setuid C program which hardcodes the
> parameters to the commands.
>
>   
Take a look at the man page for sudo.  It can limit which parameters can 
be used.  You can restrict it so that they can not execute commands with 
arbitrary arguments.



Michael


      reply	other threads:[~2007-07-03 17:28 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-07-03  2:10 Behavior of mdadm depending on user Michael Schwarz
2007-07-03 12:40 ` Ian Dall
2007-07-03 16:53   ` Michael Schwarz
2007-07-03 17:28     ` Michael [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=468A8756.4070606@kmaclub.com \
    --to=michael@kmaclub.com \
    --cc=ian@beware.dropbear.id.au \
    --cc=linux-raid@vger.kernel.org \
    --cc=mschwarz@multitool.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox