Re: Kernel-level authentication

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alle 09:25, giovedì 19 giugno 2003, hai scritto:

Please Eugene, remember to cc also the mailing list next time.

> i know... i am compiling my kernel with lsm now. the only constraint
> at least for now is that.. i have no idea how i would be able to
> prompt "password:" and wait for input from the user in kernel space..
> or at least if i am doing it in userspace, then how the kernel would
> be able to inform the user process, and how the user process would
> inform the kernel to permit or deny user to access a particular command.
Do not. Lsm enforce you to put system wide access control based on user 
credential (uid, gid). You don't need to replicate username/password 
mechanism.

> i know... my ideal situation is that i would plug a thumbprint scanner
> so that my user can launch the program, identify him/herself by scanning
> their thumbprint, and process to use the program.
Sorry, are you talking about an hardware thumbprint scanner? Maybe root_plug 
module (inside newer development kernel) may help you. It is based upon LSM 
and I'll deny some operations when a usb key is not plugged.

May be you want to put your needs in a clearer manner :)

ciao ciao
thesponge
- -- 
$>cd /pub
$>more beer

(0>
//\  Perego Paolo <p_perego@modiano.com> - www.sikurezza.org/angel
V_/_ 'Diverso non significa necessariamente peggiore.'
I'm Linux drow 2.4.19-4GB - SuSE Linux 8.1 (i386) powered.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+8XNde2SOXFIw7OcRAgbAAJ9G8BBJ9GCstRrKOVbKvKX+w5S+/QCeJE9+
Ao1FnUGQX778GT4Dvu8rRKg=
=9PvJ
-----END PGP SIGNATURE-----

--
Kernelnewbies: Help each other learn about the Linux kernel.
Archive:       http://mail.nl.linux.org/kernelnewbies/
FAQ:           http://kernelnewbies.org/faq/



[Index of Archives]     [Newbies FAQ]     [Linux Kernel Mentors]     [Linux Kernel Development]     [IETF Annouce]     [Git]     [Networking]     [Security]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux SCSI]     [Linux ACPI]
  Powered by Linux