Re: [PATCH] binfmt_misc: allow selecting the interpreter based on xattr keywords

From	One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
Newsgroups	linux.kernel
Subject	Re: [PATCH] binfmt_misc: allow selecting the interpreter based on xattr keywords
Date	2016-08-27 14:00 +0200
Message-ID	<saKrf-44i-13@gated-at.bofh.it> (permalink)
References	<sa5xM-3jP-29@gated-at.bofh.it> <sa5xM-3jP-27@gated-at.bofh.it> <saqLU-8tm-27@gated-at.bofh.it> <sawHD-3UR-1@gated-at.bofh.it> <sawRj-3Y5-5@gated-at.bofh.it>
Organization	Intel Corporation

Show all headers | View raw

On Fri, 26 Aug 2016 17:26:18 -0400
James Bottomley <James.Bottomley@HansenPartnership.com> wrote:

> On Fri, 2016-08-26 at 22:12 +0100, One Thousand Gnomes wrote:
> > > A non-security use case would be to run the binary (without 
> > > modification) with a different ELF interpreter (assuming this 
> > > allows to override binfmt_elf, but self-sandboxing would need that 
> > > as well).  This would make it easier to use older or newer libcs 
> > > for select binaries on the system.  Right now, one has to write 
> > > wrappers for that, and the explicit dynamic linker invocation is 
> > > not completely transparent to the application.  
> > 
> > If it gets in I'll be using it to label CP/M COM files so that they 
> > can be auto-run nicely when crossbuilding stuff in part with the 
> > original tools but a modern build environment 8)
> > 
> > Sandboxing is an obvious use but there are more bizarre ones such as
> > marking a file system image to get auto-run under a virtual machine 
> > or make containers fire up as if they were commands.  
> 
> So I asked previously but didn't get an answer.  If this is useful for
> sandboxing and being in the sandbox depends on the xattr value,
> shouldn't it be in one of the privileged xattr namespaces, not the
> user. one?

IMHO no 

- because it's not giving additional rights, it is taking rights away
  voluntarily
- because as a user I can simply cp the file to get an unsandboxed version

If it was a setuid like bit then yes it would matter.

Alan

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords James Bottomley <James.Bottomley@HansenPartnership.com> - 2016-08-25 18:20 +0200
  Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords Florian Weimer <fweimer@redhat.com> - 2016-08-26 17:00 +0200
    Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords Carlos O'Donell <carlos@redhat.com> - 2016-08-26 20:00 +0200
      Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords James Bottomley <James.Bottomley@HansenPartnership.com> - 2016-08-26 23:50 +0200
    Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-08-26 23:20 +0200
      Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords James Bottomley <James.Bottomley@HansenPartnership.com> - 2016-08-26 23:30 +0200
        Re: [PATCH] binfmt_misc: allow selecting the interpreter based on  xattr keywords One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-08-27 14:00 +0200

csiph-web