From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S267184AbUHDB4Q (ORCPT ); Tue, 3 Aug 2004 21:56:16 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S267194AbUHDB4Q (ORCPT ); Tue, 3 Aug 2004 21:56:16 -0400 Received: from holomorphy.com ([207.189.100.168]:38328 "EHLO holomorphy.com") by vger.kernel.org with ESMTP id S267211AbUHDB4D (ORCPT ); Tue, 3 Aug 2004 21:56:03 -0400 Date: Tue, 3 Aug 2004 18:55:41 -0700 From: William Lee Irwin III To: Gerrit Huizenga Cc: Rik van Riel , Andrea Arcangeli , Chris Wright , Arjan van de Ven , linux-kernel@vger.kernel.org, akpm@osdl.org, pbadari@us.ibm.com Subject: Re: [patch] mlock-as-nonroot revisted Message-ID: <20040804015541.GG2334@holomorphy.com> Mail-Followup-To: William Lee Irwin III , Gerrit Huizenga , Rik van Riel , Andrea Arcangeli , Chris Wright , Arjan van de Ven , linux-kernel@vger.kernel.org, akpm@osdl.org, pbadari@us.ibm.com References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.6+20040523i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org On Tue, 03 Aug 2004 21:22:45 EDT, Rik van Riel wrote: >> OK. Do any of those do the "root chowns an unnamed >> hugetlbfs file" scenario ? ;) On Tue, Aug 03, 2004 at 06:37:02PM -0700, Gerrit Huizenga wrote: > Badari will probably know the access method for DB2 better than > I do. I know they go quite out of their way to avoid having > root permissions at any point in time. How they accomplish this > in the current source base, I don't know. They were using > capabilities for things like this for a while. IIRC the program launcher acquires the capabilities prior to dropping root privileges and acquires the shm segment prior to exec. -- wli