Is it possible to limit a root process?

1

I am thinking about is that possible in any way (hardware of software) to limit a root process from accessing certain resource? I know maybe there is no existing solution, but how about a super root process? or an access restriction that only process with pid 1 can access something? or process that run on certain memory area can access something?

Sen Yang

Posted 2010-12-08T05:59:41.263

Reputation: 13

Answers

1

SELinux can limit even root from doing various things unless it takes on a specific role. And it can limit when root can take this specific role as well.

Ignacio Vazquez-Abrams

Posted 2010-12-08T05:59:41.263

Reputation: 100 516

Ah.. Yes. Is there a light-weighted solution? How they do that internally – Sen Yang – 2010-12-08T06:27:42.943

http://en.wikipedia.org/wiki/Linux_Security_Modules – Ignacio Vazquez-Abrams – 2010-12-08T06:43:56.303

Asked: 2010-12-08T05:59:41.263

Viewed: 703 times

Active: 2010-12-08T06:01:59.680