[prev in list] [next in list] [prev in thread] [next in thread] 

List:       selinux
Subject:    Re: regarding privilege granting
From:       Steve G <linux_4ever () yahoo ! com>
Date:       2007-06-25 16:26:21
Message-ID: 20070625162622.42210.qmail () web51503 ! mail ! re2 ! yahoo ! com
[Download RAW message or body]


>I'm pretty surprised that you are making the argument that these method
>of granting capabilities is harder to analyze. SELinux allows you to
>understand exactly what domains have the capabilities in exactly which
>situations. Since executable code is tightly bound to the domains
>already finding executables that can run with additional capabilities it
>not hard.

OK, what would I type at the command line to get the list of all apps with
elevated privileges? I already showed you the 1 line in bash that finds all
programs with elevated privileges today.

Thanks,
-Steve


 
____________________________________________________________________________________
Looking for earth-friendly autos? 
Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center.
http://autos.yahoo.com/green_center/

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
[prev in list] [next in list] [prev in thread] [next in thread]