Re: Is arbitrary access to rpm_t by sysadm_r a security problem?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 31.03.2004 01:37, Paul Nasrat wrote:

This will probably require having the current rpm functionality split into two executables. This means that one can be used for parsing the command line, checking the signature, and running the --pipe operation. The other could do the real work.


How does this tie in with other uses of rpmlib - eg rpm-python or the C
bindings.  Most people won't be calling rpm directly.

I am guessing that the "internal" trusted executable could be called from rpmlib and be the one doing all the stuff that requires special permissions and this way it would not matter what "front end" (rpm/apt/yum/up2date/etc) is used. I have no idea whether the current rpmlib API would support something like this, so I could be wrong.


--
Aleksey Nogin

Home Page: http://nogin.org/
E-Mail: nogin@xxxxxxxxxxxxxx (office), aleksey@xxxxxxxxx (personal)
Office: Jorgensen 70, tel: (626) 395-2907

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux