Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1661575

Re: [PATCH v2 0/1] Add Trusted Path Execution as a stackable LSM

Show all headers | View raw

> http://phrack.org/issues/52/6.html#article
> 
> | A trusted path is one that is inside a root owned directory that
> | is not group or world writable.  /bin, /usr/bin, /usr/local/bin, are
> | (under normal circumstances) considered trusted.  Any non-root
> | users home directory is not trusted, nor is /tmp.

Note that in the real world the trusted path would and should also
require that any elements of the path above that point are also locked
down if you are using path based models. Ie you need to ensure nobody has
the ability to rename /usr or /usr/local before you trust /usr/local/bin.

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH v2 0/1]  Add Trusted Path Execution as a stackable LSM Matt Brown <matt@nmatt.com> - 2017-06-08 05:50 +0200
  Re: [PATCH v2 0/1]  Add Trusted Path Execution as a stackable LSM Alan Cox <gnomes@lxorguk.ukuu.org.uk> - 2017-06-08 20:40 +0200
    Re: [PATCH v2 0/1] Add Trusted Path Execution as a stackable LSM Matt Brown <matt@nmatt.com> - 2017-06-08 21:10 +0200
      Re: [PATCH v2 0/1] Add Trusted Path Execution as a stackable LSM Alan Cox <gnomes@lxorguk.ukuu.org.uk> - 2017-06-08 21:30 +0200
      Re: [PATCH v2 0/1] Add Trusted Path Execution as a stackable LSM Mickaël Salaün <mic@digikod.net> - 2017-06-11 13:40 +0200
        Re: [PATCH v2 0/1] Add Trusted Path Execution as a stackable LSM Matt Brown <matt@nmatt.com> - 2017-06-12 02:10 +0200

csiph-web