[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: Secure 2.4.x kernel

As far as I know, Linux does not support doing that.  So the way you do it
is modify your kernel to make fork and exec revokable syscalls, write a
syscall allowing a process to request revocation of unneeded syscalls, and
add that call to your daemon.


> -----Original Message-----
> From:	Robert Clay [SMTP:JClay@techteam.com]
> Sent:	Friday, December 21, 2001 11:17 AM
> To:	debian-security@lists.debian.org
> Subject:	RE: Secure 2.4.x kernel
> And how would one do that?
> >>> Kelly Martin <kellym@fb00.fb.org> 12/21/01 12:09PM >>>
> ...Taking away the fork and exec syscalls from a daemon which does not
> need to do either would be a good start.
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org

Reply to: