[OpenAFS-devel] [LKML] Re: In-kernel Authentication Tokens (PAGs)

Alexander Boström abo@e.kth.se
Thu, 15 Jul 2004 17:58:40 +0200


On Thu, 2004-07-15 at 11:57, Tomas Olsson wrote:

> If default PAGs are by uid, it might be possible to use root's PAG after
> saying "default, please" and calling smth setuid.

Our users don't get a PAG when they telnet to one of our hosts, so we've
never had any real PAG "jail" to begin with. I doubt we really need one.

/abo