[vbox-dev] Hardening levels in VBox OSE?

Frank Mehnert Frank.Mehnert at Sun.COM
Tue Mar 23 01:47:02 PDT 2010


On Tuesday 23 March 2010, Angel Tsankov wrote:
> Frank Mehnert wrote:
> > On Tuesday 23 March 2010, Angel Tsankov wrote:
> >> Is there any way to disable the root ownership and group/other
> >> writability checks on directories in VBox OSE?
> >
> > ./configure --disable-hardening
> >
> > ?
>
> How about some way that does not disable hardening at all?

If hardenening is enabled the binaries must be suid root to be
able to access the kernel driver. All these checks ensure the
integrity of the VirtualBox installation. Either hardening is
enabled (which is strongly recommended) or it is disabled (usually
for development only). There is no 'weak' hardening.

Kind regards,

Frank
-- 
Dr.-Ing. Frank Mehnert

Sitz der Gesellschaft:
Sun Microsystems GmbH, Sonnenallee 1, 85551 Kirchheim-Heimstetten
Amtsgericht München: HRB 161028
Geschäftsführer: Thomas Schröder
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://www.virtualbox.org/pipermail/vbox-dev/attachments/20100323/0925d085/attachment-0001.bin 


More information about the vbox-dev mailing list