Restricting file access by basic privleges (Google Summer of Code 2006)
Johannes Nicolai participated in the Google Sumemr of Code 2006 program. His project was to expand the basic privilege set on OpenSolaris. The project introduced additional privileges into the basic set for file access. For full information on the project see the report.
A webrev of the source code changes can be found on Joahnnes site for now, we will make a downloadable copy of this available from here soon. Joahnnes also modified ssh-agent to show how this can be used in an application that normally runs as an unprivilged user. Similar modifications could be done to system daemons such as nfsd/lockd etc that run as a generic system user like daemon.
on 2009/10/26 12:10