System Configuration as a Privilege ∗

DMCA

System Configuration as a Privilege ∗

Cached

Download Links

by Glenn Wurster , Paul C. Oorschot

Citations:

3 - 2 self

BibTeX

@MISC{Wurster_systemconfiguration,
    author = {Glenn Wurster and Paul C. Oorschot},
    title = {System Configuration as a Privilege ∗},
    year = {}
}

OpenURL

Abstract

We present a new approach for separating configuration privilege from traditional root privilege. We limit this new configuration privilege to a single (new) system daemon, configd. This daemon reads requests for changes in system configuration, either allowing or denying each request based on various criteria (possibly including user input). We do not allow any other application to run with configuration permission, forcing all requests for a change in system configuration to be processed by configd. We discuss the basic functionality required for configd to protect system configuration, and some preliminary improvements to a basic prototype design. We concentrate on only those system configuration changes performed through the modification of a file on disk. 1

Keyphrases

system configuration new configuration privilege configuration privilege traditional root privilege preliminary improvement system configuration change new approach various criterion system daemon basic prototype design configuration permission basic functionality user input

DMCA