Re: running init by non-root-user....

Denny Z <[email protected]> wrote:
> if init handled by user non-root, our system security may increased,
> right? it's possible???

Your login processes need root priviledges (eg., authenticate, switch
uid, ...). Init needs root priviledges too (eg., mount partitions,
start/stop daemons, ...).

I don't think what you're trying to achieve is possible with traditional
unix security concepts. You could try something in that direction with
SE-Linux though, where you don't have a real super user, but give every
component exactly the rights it needs to do what it's supposed to do.
But it's a lot of work to set up properly.

Cheers,
Dan

-- 
    Daniel Roethlisberger <[email protected]>
    OpenPGP key id 0x804A06B1 (1024/4096 DSA/ElGamal)
    144D 6A5E 0C88 E5D7 0775 FCFD 3974 0E98 804A 06B1
!->

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/zNNlOXQOmIBKBrERAkgfAJ9LJ2voGgY1Oq9IlXCcEbQTjoEQ1ACfXfvR
RDxa2VIp5u2jWt2khEYXH8s=
=zulr
-----END PGP SIGNATURE-----