ccache using linux keyring

Matt Crawford crawdad at fnal.gov
Thu Apr 14 10:32:32 EDT 2005


I don't know anything about the Linux keyring, but I'd like to see a 
kernel credential cache which by default can only be accessed by 
processes descended from the one that created it, or (optionally) 
descended from the parent of that process, like the AFS token cache is 
after setpag().  This would add some resistance against a user-level 
breakin propagating to everywhere the credentials are authorized.



More information about the krbdev mailing list