Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The big advantage is if setuid and setgid support can be entirely removed. There are a bunch of special cases that have been added over the years to try to deal but increasing priviledges of a process is fundamentally more challenging in the unix security model than only ever lowering priviledges. Of course these days Linux has priviledge escalation via user namespaces as well.


Psst… privilege has no letter D




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: