{"id":13329,"date":"2021-12-09T20:40:06","date_gmt":"2021-12-10T01:40:06","guid":{"rendered":"https:\/\/carleton.ca\/scs\/?page_id=13329"},"modified":"2026-06-02T14:59:23","modified_gmt":"2026-06-02T18:59:23","slug":"tr-10-10-a-control-point-for-reducing-root-abuse-of-file-system-privileges","status":"publish","type":"page","link":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2010\/tr-10-10-a-control-point-for-reducing-root-abuse-of-file-system-privileges\/","title":{"rendered":"TR-10-10: A Control Point for Reducing Root Abuse of File-System Privileges"},"content":{"rendered":"\n
\n
\n\n
\n
\n
\n

\n TR-10-10: A Control Point for Reducing Root Abuse of File-System Privileges\n <\/h1>\n \n \n <\/header>\n\n <\/div>\n\n <\/div>\n\n <\/div>\n<\/section>\n\n

Carleton University
\nTechnical Report<\/a> TR-10-10
\nApril 10, 2010<\/p>\n\n\n\n

A Control Point for Reducing Root Abuse of File-System Privileges<\/h2>\n\n\n\n
\n
\n
\n
\n
\n
\n
\n
Glenn Wurster & Paul C. van Oorschot<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n

Abstract<\/h3>\n

We address the problem of restricting root’s ability to change arbitrary files on disk, in order to prevent abuse on most current desktop operating systems. The approach first involves recognizing and separating out the ability to configure a system from the ability to use the system to perform tasks. The permission to modify configuration of the system is then further subdivided in order to restrict applications from modifying the file-system objects of other applications. We explore the division of root’s current ability to change arbitrary files on disk and discuss a prototype that proves out the viability of the approach. Our architecture exposes a control point available for use to enforce policies that prevent one application from modifying another’s file-system objects.<\/p>\n

TR-10-10.pdf<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Carleton University Technical Report TR-10-10 April 10, 2010 A Control Point for Reducing Root Abuse of File-System Privileges Glenn Wurster & Paul C. van Oorschot Abstract We address the problem of restricting root’s ability to change arbitrary files on disk, in order to prevent abuse on most current desktop operating systems. The approach first involves […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":12468,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_cu_dining_location_slug":"","footnotes":"","_links_to":"","_links_to_target":""},"cu_page_type":[],"class_list":["post-13329","page","type-page","status-publish","hentry"],"acf":{"cu_post_thumbnail":false},"_links":{"self":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13329","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/comments?post=13329"}],"version-history":[{"count":1,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13329\/revisions"}],"predecessor-version":[{"id":13330,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13329\/revisions\/13330"}],"up":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/12468"}],"wp:attachment":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/media?parent=13329"}],"wp:term":[{"taxonomy":"cu_page_type","embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/cu_page_type?post=13329"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}