Practical techniques to obviate setuid-to-root binaries

Proceedings of the 9th European Conference on Computer Systems, EuroSys 2014

Volumn , Issue , 2014, Pages

  Jain, Bhushan ^a   Tsai, Chia Che ^a   John, Jitin ^a   Porter, Donald E ^a  

^a STONY BROOK UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SCIENCE; COMPUTERS;

ACCEPTABLE PERFORMANCE; CONFIGURATION FILES; LEAST PRIVILEGE; LINES OF CODE; LINUX KERNEL; SYSTEM CALLS; UNIX SYSTEMS;

COMPUTER OPERATING SYSTEMS;

EID: 84900447593     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2592798.2592811     Document Type: Conference Paper

References (49)

1. The openldap project. http://www.openldap.org/project/, Aug. 1998.
2. netfilter. http://www.netfilter.org/Dec. 2001.
3. The automounter autofs. http://www.autofs.org/, Sep. 2002.
4. Py-notify. http://home.gna.org/py-notify/, Dec. 2008.
5. SOCK RAW Demystified. http://www.sock-raw.org/papers/sock-raw, May 2008.
6. AppArmor. http://wiki.apparmor.net/index.php/Main-Page, Jun. 2011.
7. Kernel mode setting. https://wiki.archlinux.org/index.php/Kernel\-Mode\- Setting, Jan. 2011.
8. Debian Popularity Contest. http://popcon.debian.org/by-inst, Feb. 2013.
9. Lintian Reports : setuid-binary. http://lintian.debian.org/tags/setuid- binary.html, Feb. 2013.
10. Ubuntu Popularity Contest. http://popcon.ubuntu.com/by-inst, Feb. 2013.
11. Apple. Mac OS X Server V10.6 - Open Directory Administration. White Paper, Apple: http://manuals.info.apple.com/MANUALS/1000/MA1180/en-US/ OpenDirAdmin-v10.6.pdf, August 2009.
12. Securing Debian Manual: Bastille Linux. http://www.debian.org/doc/ manuals/securing-debianhowto/ch-automatic-harden.en.html\#s6.2, Apr. 2012.
13. M. Bishop. Managing Superuser Privileges under UNIX. Technical report, Research Institute for Advanced Computer Science, NASA Ames Research Center, 1986.
14. B. Bringert. Executable based access control. Technical report, Chalmers University of Technology, 2003.
15. H. Chen, N. Li, and Z. Mao. Analyzing and Comparing the Protection Quality of Security Enhanced Operating Systems. In Proceedings of the Network and Distributed System Security Symposium (NDSS), 2009.
16. H. Chen, D. Wagner, and D. Dean. Setuid Demystified. In Proceedings of the USENIX Security Symposium, pages 171- 190, 2002.
17. R. Coker. Benchmarking Mail Relays and Forwarders. In OSDC Conference, 2006.
18. J. Corbet. File-based capabilities. http://lwn.net/Articles/211883/ November 2006.
19. J. Corbet. Rootless X. http://lwn.net/Articles/341033/July 2009.
20. R. Cox, E. Grosse, R. Pike, D. Presotto, and S. Quinlan. Security in Plan 9. In Proceedings of the USENIX Security Symposium, pages 3-16, 2002.
21. Fedoraproject Wiki: Features/RemoveSETUID. https://fedoraproject.org/ wiki/Features/RemoveSETUID, Apr. 2011.
22. D. Ferraiolo and D. Kuhn. Role-Based Access Control. In 15th National Computer Security Conference, pages 554-563, 1992.
23. V. Gligor, C. Chandersekaran, R. Chapman, L. Dotterer, M. Hetch, W.-D. Jiang, A. Johri, G. Luckenbaugh, and N. Vasudevan. Design and implementation of Secure Xenix. IEEE Transactions on Software Engineering, SE-13(2):208 - 221, Feb. 1987.
24. N. M. Guire. Linux kernel gcov - Tool analysis. http://dslab.lzu.edu.cn: 8080/docs/2006summerschool/team1/teama/Documentation/howtos/der-herr-gcov.pdf, 2006.
25. M. Hecht, M. Carson, C. Chandersekaran, R. Chapman, L. Dotterrer, V. Gilgor, W.-D. Jiang, A. Johri, G. Luckenbaugh, and N. Vasudevan. UNIX without the Superuser. In Proceedings of the USENIX Security Symposium, pages 243 -256, June 1987.
26. K. Johnson, J. B. Zurschmeide, J. Raithel, T. Schultz, and B. Tuthill. IRIX admin: Backup, security, and accounting. Technical report, Silicon Graphics, Inc., 2005.
27. M. Kerrisk. CAP SYS ADMIN: The new root. http://lwn.net/Articles/486306/ March 2012.
28. M. Kerrisk. User namespaces progress. https://lwn.net/Articles/528078/ Dec. 2012.
29. S. Kramer. LINUS IV - An Experiment in Computer Security. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland), pages 24-33, 1984.
30. M. Larabel. A NVIDIA Tegra 2 DRM/KMS Driver Tips Up. http://www.phoronix. com/vr.php?view=MTA4NjA, Apr. 2012.
31. H. M. Levy. Capability-Based Computer Systems. Digital Press, Bedford, Massachusetts, 1984.
32. P. Loscocco and S. Smalley. Integrating flexible support for security policies into the Linux operating system. In Proceedings of the USENIX Security Symposium, pages 29- 42, 2001.
33. S. McCanne and V. Jacobson. The BSD Packet Filter: A New Architecture for User-level Packet Capture. In Proceedings of the USENIX Security Symposium, pages 259-270, 1993.
34. Microsoft. TCP/IP Raw Sockets. http://msdn.microsoft.com/en-us/library/ windows/desktop/ms740548\%28v=vs.85\%29.aspx 2012.
35. MITRE. Common Vulnerabilities and Exploits Database. http://cve.mitre. org/Feb. 2013.
36. Summary about POSIX 1.e. http://wt.tuxomania.net/publications/posix.1e/, Feb. 1999.
37. N. Provos. Improving host security with system call policies. In Proceedings of the USENIX Security Symposium, pages 257-272, 2002.
38. J. H. Saltzer and M. D. Schroeder. The Protection of Information in Computer System. Proceedings of the IEEE, 63(9):1278-1308, 1975.
39. J. S. Shapiro, J. M. Smith, and D. J. Farber. EROS: A fast capability system. In Proceedings of the ACM Symposium on Operating Systems Principles (SOSP), pages 170-185, 1999.
40. I. Shields. Monitor linux file system events with inotify. http://www.ibm.com/developerworks/linux/library/l-inotify/index.html Sep. 2010.
41. T. Shinagawa and K. Kono. Implementing A Secure Setuid Program. In Proceedings of the Conference on Parallel and Distributed Computing and Networks, pages 301-309, 2004.
42. M. M. Swift, P. Brundrett, C. V. Dyke, P. Garg, A. Hopkins, S. Chan, M. Goertzel, and G. Jensenworth. Improving the granularity of access control in Windows NT. In Proceedings of the ACM Symposium on Access Control Models and Technologies, pages 87-96, 2001.
43. A. Tominaga, O. Nakamura, F. Teraoka, and J. Murai. Problems and Solutions of DHCP - Experiences with DHCP implementation and Operation. http://www.isoc.org/inet95/proceedings/PAPER/127/html/paper.html, 1995.
44. D. Tsafrir, D. D. Silva, and D. Wagner. The murky issue of changing process identity: revising "setuid demystified". USENIX;login, 33(3):55-66, June 2008.
45. Ubuntu Wiki: Filesystem Capabilities. https://wiki.ubuntu.com/Security/ Features\#Filesystem-Capabilities, March 2014.
46. K. M. Walker, D. F. Sterne, M. L. Badger, M. J. Petkac, D. L. Sherman, and K. A. Oostendorp. Confining root programs with domain and type enforcement (DTE). In Proceedings of the USENIX Security Symposium, pages 3-3, 1996.
47. R. Wong. A comparison of secure UNIX operating systems. In Proceedings of the Annual Computer Security Applications Conference (ACSAC), pages 322-333, 1990.
48. C. Wright, C. Cowan, S. Smalley, J. Morris, and G. K. Hartman. Linux Security Modules: General Security Support for the Linux Kernel. In Proceedings of the USENIX Security Symposium, pages 17-31, 2002.
49. W.Wulf, E. Cohen, W. Corwin, A. Jones, R. Levin, C. Pierson, and F. Pollack. HYDRA: The kernel of a multiprocessor operating system. Communications of the ACM (CACM), 17(6):337-345, June 1974.