3 ms·

I don't as doing that is as bad as suid binaries except now the binaries aren't even hardened. suid binaries shouldn't exist either.

• josephcsible 3y ago
  What would you replace suid binaries with? Just getting rid of suid without replacement would totally break your system.
  • charcircuit 3y ago
    Normal binaries that talk to services running as other users who have the minimal possible permissions. For example instead having users run ping as the root user using suid, you instead have a ping client talk to a ping service on the system. The ping service runs as a user with the raw sockets capability and nothing else.
    • josephcsible 3y ago
      How is that an improvement over just giving the ping binary on disk that capability? And how would "su" and "sudo" work in your model?
      • charcircuit 3y ago
        >How is that an improvement over just giving the ping binary on disk that capability? That would be okay too, but not all suid usages can be replaced like that. >And how would "su" and "sudo" work in your model? They wouldn't exist in my model.