Re: Re : Bounds-checking gcc ..

:>>>>> "Adrian" == Adrian Chadd <adrian@cougar.aceonline.com.au> writes:

    Ooohh... now here's an idea. One could require that suid root binaries     make a system call to 'enable' the suid operation. This system call would     be embedded in a securitize() subroutine which would go through, clear     up the environment, fix the resource limits, and enable suid oeration.     If the binary does not make the system call, it doesn't get suid     privilages even if chmod'd 4xxx. The program could pass a list of     environment variables to the system call to 'pass through'.

    i.e. the suid bit would have to be set AND the program would have to     make the system call.

                                            -Matt

    Matthew Dillon Engineering, BEST Internet Communications, Inc.

                    <dillon@best.net>
    [always include a portion of the original email in any response!] Received on Tue Feb 18 10:31:41 1997