Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-18 Thread Alan McKinnon
On Sunday 18 April 2010 07:41:51 Mike Edenfield wrote: On 4/18/2010 12:29 AM, Jonathan wrote: On Sun, 18 Apr 2010 00:46:25 +0100 David W Noondwn...@ntlworld.com wrote: If any Joe Schmoe could imbue a program with capabilities, this might be true. But that's not the way the system

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread Mick
On Friday 16 April 2010 23:13:34 Jonathan wrote: I'm trying to work out how many ways there are to increase the permissions of a user. 1: su -: Needs root password and you need to be in the group wheel. 2: sudo: You need to be in the group wheel or in the /etc/sudoers file, using your

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread David W Noon
On Sat, 17 Apr 2010 20:30:02 +0200, Mick wrote about Re: [gentoo-user] How many ways are there for a user to increase their permissions?: On Friday 16 April 2010 23:13:34 Jonathan wrote: [snip] 4: Linux Capabilities or caps: Which increases permissions on a per-file basis. e.g. removing SUID

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread Jonathan
On Sat, 17 Apr 2010 21:45:57 +0100 David W Noon dwn...@ntlworld.com wrote: In fact, POSIX capabilities are a mechanism to *reduce* a program's permissions, not increase them. It's true that Linux capabilities are used to replace SUID and that does reduce the programs permissions. On the other

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread KH
Am 17.04.2010 23:32, schrieb Jonathan: On Sat, 17 Apr 2010 21:45:57 +0100 David W Noondwn...@ntlworld.com wrote: In fact, POSIX capabilities are a mechanism to *reduce* a program's permissions, not increase them. It's true that Linux capabilities are used to replace SUID and that does

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread Jonathan
On Sat, 17 Apr 2010 23:59:07 +0200 KH gentoo-u...@konstantinhansen.de wrote: Sounds a little like putting someone in prison and than telling him walking through the prison yard is increasing his freedom. As Linux is a prison for programs then I guess your right.

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread David W Noon
On Sat, 17 Apr 2010 23:40:01 +0200, Jonathan wrote about Re: [gentoo-user] How many ways are there for a user to increase their permissions?: On Sat, 17 Apr 2010 21:45:57 +0100 David W Noon dwn...@ntlworld.com wrote: In fact, POSIX capabilities are a mechanism to *reduce* a program's

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread Jonathan
On Sun, 18 Apr 2010 00:46:25 +0100 David W Noon dwn...@ntlworld.com wrote: If any Joe Schmoe could imbue a program with capabilities, this might be true. But that's not the way the system works. Sorry, I think i'm missing your point. Only root can run the setcap program to add capabilities

Re: [gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-17 Thread Mike Edenfield
On 4/18/2010 12:29 AM, Jonathan wrote: On Sun, 18 Apr 2010 00:46:25 +0100 David W Noondwn...@ntlworld.com wrote: If any Joe Schmoe could imbue a program with capabilities, this might be true. But that's not the way the system works. Sorry, I think i'm missing your point. Only root can

[gentoo-user] How many ways are there for a user to increase their permissions?

2010-04-16 Thread Jonathan
I'm trying to work out how many ways there are to increase the permissions of a user. 1: su -: Needs root password and you need to be in the group wheel. 2: sudo: You need to be in the group wheel or in the /etc/sudoers file, using your own user password. I'm not counting gksu and gksudo