[PLUG] Help Needed

[Nilesh Naykodi]

For the first issue:
Create a system user with the same name as application Y. Change the
ownership of file X and application Y to this system user. Chng the file
permissions of the file X to 600 with chmod. And enable the setuid bit of
the application Y also with chmod.

For the second issue:
If application Y runs as root user then it will get all the rights to
access all the files including file X.

Nilesh Naykodi
A Linux enthusiaist


On Oct 25, 2017 11:04 PM, "harshad wadkar" <harshad.wadkar at gmail.com> wrote:

My information :
Name : Harshad Wadkar
Student : PhD student
Area of Interest : Browser security, Operating system security.

Sir,

I am trying to solve a problem wherein I would like to give (read, write)
access to file X, if it is accessed by only application Y and again if the
application Y is invoked by root user.

I have gone through the documentation of Apparmor, seccomp etc. But not
able to find solution to the problem I am trying to solve.

If you can suggest me a tool or api or library that will help me to solve
my problem, it will be great.

Your guidance is vital to me. Waiting for your reply.

I apologize for the disturbance.

Thanks & Regards

Harshad

_______________________________________________
plug-mail mailing list
plug-mail at plug.org.in
http://list.plug.org.in/listinfo/plug-mail
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://list.plug.org.in/pipermail/plug-mail/attachments/20171027/7553338b/attachment.html>