Re: kdbus: credential faking

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	Richard Weinberger <richard.weinberger@gmail.com>
Newsgroups	linux.kernel
Subject	Re: kdbus: credential faking
Date	Sat, 11 Jul 2015 13:40:01 +0200
Message-ID	<pL1ip-2BL-3@gated-at.bofh.it> (permalink)
References	<pKoK6-3AO-21@gated-at.bofh.it> <pKsul-63C-5@gated-at.bofh.it> <pKGxj-6xX-1@gated-at.bofh.it> <pKGQG-6Gh-21@gated-at.bofh.it> <pKJ2a-8aV-25@gated-at.bofh.it> <pKJlv-8hr-9@gated-at.bofh.it> <pKK7V-mu-33@gated-at.bofh.it> <pKKUh-Sv-5@gated-at.bofh.it> <pKLnk-12f-19@gated-at.bofh.it>
X-Original-To	Casey Schaufler <casey@schaufler-ca.com>
Dkim-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=7IcVrTgT2QkPu2Yy16TOuy9iYwK6E6KoEQoUklEozhk=; b=aoy0UaN0ioWfxwXn73h5mAQFNveAC8CCeBK4FGJ0prkF4qAP9OLfzefl8JUxlBaXmy x8k4lpOdHzAZZ9AHKOoXxWQSnpTUmUAPYwZAFQkTW+31xG/0/+c09kbog9X+9LOd52BA S9vv2BqKn+BehUo1RvoK29o9WCNCVrjMLN3qrb+MGIynrol3QzOAFX4DB2kHG0376ThW Een4dPz5CfzMRYX8RU16IXlyHXWwjY99N6cwi8ylwv7ITeizbRcMvnhuuHeCc0lWIv0k m6davL1BBcxuhHNYn4trneOrhk1QiDMPb/i8AyjpKoY6lCHBca/elhYSF/h3+wUTgSV9 1TIA==
MIME-Version	1.0
X-Received	by 10.202.0.212 with SMTP id 203mr20317252oia.58.1436614252582; Sat, 11 Jul 2015 04:30:52 -0700 (PDT)
Content-Type	text/plain; charset=UTF-8
Sender	robomod@news.nic.it
List-ID	<linux-kernel.vger.kernel.org>
X-Mailing-List	linux-kernel@vger.kernel.org
Approved	robomod@news.nic.it
Lines	27
Organization	linux.* mail to news gateway
X-Original-Cc	David Herrmann <dh.herrmann@gmail.com>, Stephen Smalley <sds@tycho.nsa.gov>, Greg KH <gregkh@linuxfoundation.org>, Daniel Mack <daniel@zonque.org>, Djalal Harouni <tixxdz@opendz.org>, lkml <linux-kernel@vger.kernel.org>, LSM <linux-security-module@vger.kernel.org>, Paul Osmialowski <p.osmialowsk@samsung.com>, Paul Moore <paul@paul-moore.com>
X-Original-Date	Sat, 11 Jul 2015 13:30:52 +0200
X-Original-Message-ID	<CAFLxGvxO7EtBapTuO5vWuS20hdRxPxr=s=Co7=kTbh8DhFWEuA@mail.gmail.com>
X-Original-References	<559EBCC0.7040604@tycho.nsa.gov> <CANq1E4QH37+H3cbauN8LDRxp+Rsmtcn6CkLYCiV7XQrhm=qP9Q@mail.gmail.com> <559FC7DD.8060507@tycho.nsa.gov> <CANq1E4TaE6EK1iEGLq_Zhu6=z52VZx7sPFc4TVc1vt1F3pShcA@mail.gmail.com> <559FEBF2.1040908@schaufler-ca.com> <CANq1E4Sdpb81PW9Ju+bnRjtZ=9HkGwGse-gstx1SjaEzmWiT-w@mail.gmail.com> <559FFDDF.2090302@schaufler-ca.com> <CAFLxGvxxDvobrtWm4YiDwMtX7A5EH7crtyE+gi5UNmZqkJ6YZQ@mail.gmail.com> <55A01099.4030708@schaufler-ca.com>
X-Original-Sender	linux-kernel-owner@vger.kernel.org
Xref	aioe.org linux.kernel:1182138

Show key headers only | View raw

On Fri, Jul 10, 2015 at 8:36 PM, Casey Schaufler <casey@schaufler-ca.com> wrote:
> On some systems the uid is being used as an application identifier
> instead of a human identifier. The access controls are not designed
> for this. The POSIX capabilities aren't designed for this. If Fred
> creates a program that is setuid to fred and gets Barney to run it,
> you hold Fred accountable. If a malicious (or compromised) application
> identified by "fred" creates a setuid fred program and the "barney"
> application runs it, who do you hold accountable? It's a completely
> different mindset. Sure, you can wedge the one into the other, but
> it's not the intended use. Hence, misuse or abuse.

Actually that's an interesting thought.
The question is whether the /run/user/<uid>/bus security model works
also for "special" userland like Android.
To my knowledge on Android each application runs as different user.

If kdbus gets merged it would be nice to have to work with all kinds of userland
and not only Fedora.

-- 
Thanks,
//richard
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: kdbus: credential faking David Herrmann <dh.herrmann@gmail.com> - 2015-07-10 18:30 +0200
  Re: kdbus: credential faking Casey Schaufler <casey@schaufler-ca.com> - 2015-07-10 19:20 +0200
    Re: kdbus: credential faking Richard Weinberger <richard.weinberger@gmail.com> - 2015-07-11 13:40 +0200

csiph-web