Re: NFS4 authentification / fsuid

J. Bruce Fields
2007-09-06T15:11:31Z

On Thu, Sep 06, 2007 at 01:59:50PM +0530, Satyam Sharma wrote:
> Oh and btw, note that we're talking of the (lack of) security of a
> "running kernel" here -- because across reboots, there is /really/
> *absolutely* no such thing as "kernelspace security" because the superuser
> will simply switch the vmlinuz itself ...

Well, the machine could be booting from cdrom, and could live in a
locked machine room. Or people with root on a virtual host don't
necessarily have the ability to replace the kernel for that host.

--b.