tech-kern archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: /sbin/reboot and secmodel

Christoph Badura wrote:
So, assuming that we would want to change our policy of signalling init(8)
to be overridable by different secmodel, why not just implement that?
I.e. change secmodel_bsd44 to return KAUTH_RESULT_DEFER when a process
tries to signal pid 1.

Then Emmanuel can create a secmodel that authorizes specific users to do
that by returing KAUTH_RESULT_ALLOW.

That's only part of the problem: reboot signals init, but then also
signals to (supposedly) all processes on the system with SIGTERM and
SIGKILL to have them exit, too. While the reboot program will silently
ignore the EPERMs, we'll only be pretending to have reboot working as
it should. :)


Home | Main Index | Thread Index | Old Index