Re: immutable etc.

[Andi Kleen <ak@xxxxxxx>]

On Thu, Dec 07, 2000 at 09:35:17AM +0100, Christoph Hellwig wrote:
> On Thu, Dec 07, 2000 at 05:25:57PM +1100, Timothy Shimmin wrote:
> > Immutable sounds pretty much what one could achieve using the
> > standard access modes except for ROOT being disallowed to change
> > the file (without first setting the attribute).
> > OOI, how useful is this attribute ?
> 
> The basic idea of immutable files is that you drop
> CAP_LINUX_IMMUTABLE for all processes, and attackers won't be able
> to modifiy your binaries even if they have root access.

So they just have to write to the block or raw device or directly to the
hardware (e.g. working IMMUTABLE normally implies non working x server).
Commonly accessed binaries like the ld.so can also be just modified in core. 




-Andi (who does not think immutable is very useful)