* suggestion: msgctl(IPC_RMID) req CAP_IPC_OWNER instead of CAP_SYS_ADMIN
@ 2010-01-02 6:01 starlight
0 siblings, 0 replies; only message in thread
From: starlight @ 2010-01-02 6:01 UTC (permalink / raw)
To: linux-kernel
Hello,
We have a service daemon that must on occasion clean up orphaned
SVR4/POSIX message queues left over by dead client processes.
The service daemon runs with least privileges, and it receives a
small set of capabilities that its job demands.
However I was surprised to see that CAP_SYS_ADMIN is needed when
using IPC_RMID to remove message queues owned by other user
IDs. This is a powerful and dangerous privilege and I dislike
assigning it to the daemon. Seems to me that CAP_IPC_OWNER is a
better fit for this function.
This is just a suggestion. Please respond with my e-mail CCed
as I am not a list subscriber.
Regards
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2010-01-02 6:15 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2010-01-02 6:01 suggestion: msgctl(IPC_RMID) req CAP_IPC_OWNER instead of CAP_SYS_ADMIN starlight
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®