POSIX Capabilities Part2 - CAP_DAC_OVERRIDE - Bypass permission check

-
CAP_DAC_OVERRIDE: Allows a non-root user full file system access. Bypasses file read, write and execute permission check.

DAC stands for "discretionary access control"

Let's see an example using this capability.


You can see from the above screenshot, after giving 'CAP_DAC_OVERRIDE' capability, i am able to open '/etc/shadow' which only root user can access.

Comments

Post a Comment

Popular posts from this blog

Appending and Prepending in Yocto - +=, =+ vs .=, =.

-
Image
Bitbake provides two sets of appending and prepending operators. 1. +=, =+ 2. .= , =. For example, A = "hello" A += "world" C = "good" C =+ "bye" The value of A will be "hello world" and C will be "bye good" So, += is appending and =+ is for prepending. Note, that these operators include an additional space between each call When we don't need to add space, we can use .=, =. operators. These are mainly used to concatenate strings. When we use append, prepend, there will be no additional space added, you need to manually provide space. You can also remove values from the variable using 'remove'.
Read more

Connecting Serial ports of two Ubuntu VMWare Virtual Machines

-
Image
This post is to establish the serial communication between two Virtual Machines running Ubuntu in VMWare. Serial Ports are very important and with this setup, we can write applications and don't worry to have a hardware. This setup is also used if we need to setup KGDB Steps on the First Virtual Machine: Step1: Open Virtual Machine Settings and click on Add Step2:  Select "Serial Port" and Click On Next Step3: Select "Use Named Pipe" Step4: You will observe the named pipe of the form \\.\pipe\<namedpipe>. Keep the settings as it is i..e, the named pipe: \\.\pipe\com_1 ( it will be ttyS1 in Linux) and click on Finish Steps on the Second Virtual Machine: Perform the same steps  1 to 4 except in 4th step select "This end is Client". Testing the serial connection between VMs: 1. Power on the two VMs 2. On First VM : cat /dev/ttyS1 and the other VM: echo "hello" > /dev/ttyS1
Read more

Linux Commands for Hardware Info - lshw, lspci, lsdev, lscpu, lsblk, lsusb

-
Image
In this post, we will discuss some of the Linux commands for retrieving hardware information. I am using Ubuntu 14.04 as my development machine. 1. lshw  -> lshw stands for list hardware. It generates detailed information about various hardware devices present on the system by reading the /proc filesystem. Running lshw without any commands will generate full information report about all detected hardware. Note: It should run as root user to get full information Running "lshw -short" will produce brief information For more lshw commands, look at this article:  https://www.binarytides.com/linux-lshw-command/ 2. lspci  -> Displays information about the PCI buses in the system and devices connected to them. Simply run the lspci command to get the PCI information. Running "lspci -vvv" command will generate verbose output, which also contains the name of the driver for that PCI Device. Running "lspci -tree" will di...
Read more