Re: Shill: capability-based shell
Scott Moore <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <CANCm3+LiXRHuAnGQXY0ypqOCyzaJGOk=JxDzpq5Ew-5HhChZgQ@mail.gmail.com> |
Hi Bill, Yes, you're right that you need to look at a bit more than the contract for that particular security goal. The actual script is careful not to grant this capability to student programs directly, but appends per-submission log files onto the log. We probably should have clarified that further in the paper, and used a more specific "append-only" capability for the script as a whole... Good catch. Cheers, Scott On Thu, Sep 25, 2014 at 5:49 PM, Bill Frantz <[email protected]> wrote: > On 9/25/14 at 9:45 AM, [email protected] (Scott Moore) wrote: > > Hi all, >> I'm part of the team working on Shill. I'm happy to answer any questions >> and we're very excited to hear what cap-talk thinks! >> Cheers, >> Scott >> >> On Thursday, September 25, 2014, Tony Arcieri <[email protected]> wrote: >> >> Apologies if this has been discussed before but It's New To Me(TM), and >>> relevant to the recent "Shellshock" escapades with bash: >>> >>> http://shill.seas.harvard.edu/ >>> >>> -- >>> Tony Arcieri >>> >> > In looking at your paper <http://shill.seas.harvard. > edu/shill-osdi-2014.pdf>, figure 1, it appears that the grade instance > has full write access to the grade_log. I interpret this to mean that a > student program could overwrite or otherwise corrupt the grade_log. This is > similar to the problem Norm Hardy addressed with his "Confused Deputy" > paper. > > Don't get me wrong. I think Shill is addressing many of the right issues, > is a useful contribution, and the above issue could be addressed in several > ways within the Shill system. > > Cheers - Bill > > ----------------------------------------------------------------------- > Bill Frantz | Truth and love must prevail | Periwinkle > (408)356-8506 | over lies and hate. | 16345 Englewood Ave > www.pwpconsult.com | - Vaclav Havel | Los Gatos, CA 95032 > > _______________________________________________ cap-talk mailing list [email protected] http://www.eros-os.org/mailman/listinfo/cap-talk