[7863] in bugtraq
Re: Security Hole in Axent ESM
daemon@ATHENA.MIT.EDU (Patrick)
Wed Sep 2 18:24:10 1998
Date: Wed, 2 Sep 1998 14:50:57 -0400
Reply-To: Patrick <patrick@CS.VIRGINIA.EDU>
From: Patrick <patrick@CS.VIRGINIA.EDU>
X-To: Taral <taral@mail.utexas.edu>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <000301bdd694$372c5cc0$3b291f0a@taral>
> Yes. Process capability restrictions. CAP_TIME or something like that could
> be easily implemented.
Looks like it already has. (Except that capabilities still aren't in the
ext2 code of mainstream kernels, are they?)
Look in kernel 2.1.119 at include/linux/capability.h, lines 246-250 and
kernel/time.c, lines 155-160.
--Patrick
