> Regarding the multi-level idea, it would be a second phase. I would
> like to be able to contain effectively a possible root escalation
> from a poorly written CGI or PHP script. I know, it would be anyway
> extremely hard. But if we could launch the web server process with
> an additional lower security level inherited by all of its child
> processes, we could prevent damage to the system even by a child
> processes that escalated to root.
And I answer myself :) (forgot to add this)
Another desired functionality involves making sure that code injected
into a poorly written PHP or CGI module cannot (for example)
establish unauthorized network connections, listen(), etc. The
FreeBSD ipfw has a lot of potential, but, unfortunately, ftp
complicates the implementation of a simple uid-based limitation.
Security levels would help here as well.
Borja.
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"