Ion Badulescu writes:
> On Sat, 15 Apr 2000, Albert D. Cahalan wrote:
>
>>> The chown-ing on console login (or some similar method
>>> through devfs/devfsd) is the cleanest way to do this.
>>
>> If that is the cleanest way, I'd hate to see the less clean ways.
>
> If putting custom checks for custom GID's in the kernel is your idea of
> "clean way"... I'd suggest turning to Microsoft or one of the
> implement-everything-the-customer-suggests Unix vendors for your needs.
I kept it generic. Nowhere did I say there would be GID values
compiled into the kernel, nor did I say anything about the kernel
knowing about the "console user" concept. The two alternate
proposals are suitable for "remote user" too, at the same time.
For the first choice:
echo "90 91 92" > /proc/sys/kernel/restricted-uid
The second choice requires a setgroups() replacement.
I favor this choice, for both power and performance.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Sat Apr 15 2000 - 21:00:25 EST