mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
* [user question] security.mac.seeotheruids.enabled equivalent in Linux
@ 2006-10-03 15:29 Andrew Martin
  2006-10-03 15:54 ` Casey Schaufler
  0 siblings, 1 reply; 2+ messages in thread
From: Andrew Martin @ 2006-10-03 15:29 UTC (permalink / raw)
  To: linux-kernel

Thanks for reading my question :)

I am looking for a Linux equivalent of the
security.mac.seeotheruids.enabled sysctl found on BSD. Preferably one
that works with the latest vanilla mainline kernel.

Basically if it's switched off then users cannot see other users'
processes, network connections, UNIX sockets, mounts, etc... but can
still see if they are logged in or not.

-- 
If thou guardest nae thinge at alle, to Alleman's Ende thou'lt passe and falle.

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [user question] security.mac.seeotheruids.enabled equivalent in Linux
  2006-10-03 15:29 [user question] security.mac.seeotheruids.enabled equivalent in Linux Andrew Martin
@ 2006-10-03 15:54 ` Casey Schaufler
  0 siblings, 0 replies; 2+ messages in thread
From: Casey Schaufler @ 2006-10-03 15:54 UTC (permalink / raw)
  To: Andrew Martin, linux-kernel



--- Andrew Martin <andy.martin.p@gmail.com> wrote:

> Thanks for reading my question :)
> 
> I am looking for a Linux equivalent of the
> security.mac.seeotheruids.enabled sysctl found on
> BSD. Preferably one
> that works with the latest vanilla mainline kernel.
> 
> Basically if it's switched off then users cannot see
> other users'
> processes, network connections, UNIX sockets,
> mounts, etc... but can
> still see if they are logged in or not.

SELinux might be your (current) best bet.


Casey Schaufler
casey@schaufler-ca.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2006-10-03 15:54 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2006-10-03 15:29 [user question] security.mac.seeotheruids.enabled equivalent in Linux Andrew Martin
2006-10-03 15:54 ` Casey Schaufler

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

all inboxes | Powered by JetHome®