Re: [PATCH] remove sys_security

Jakob Oestergaard
2002-10-18T14:18:59Z

On Thu, Oct 17, 2002 at 04:08:55PM -0700, David S. Miller wrote:
> From: Chris Wright <chris@wirex.com>
> Date: Thu, 17 Oct 2002 16:04:36 -0700
>
> the photographer would like it if the mp3 player can't remove files
> in ~/photos/ when it plays a malicious .mp3 file.
>
> LSM doesn't provide anything in this area which can't be done
> today. You can protect that directory from malicious programs
> today with file/dir protections and running programs with a different
> capability set or even with a different euid/egid for file accesses.

Ok - now I'm surprised.

How do I prevent my Evolution from reading
Projects/top-secret-stuff/main.c ?

I mean, my emacs should still be able to read it of course, and su'ing
to fifty different users for each of the fifty applications I usually
run is not really an option of course.

Please enlighten me :)

--
................................................................
: jakob@unthought.net : And I see the elder races, :
:.........................: putrid forms of man :
: Jakob Østergaard : See him rise and claim the earth, :
: OZ9ABN : his downfall is at hand. :
:.........................:............{Konkhra}...............: