Restricting privileges of first privileged process in operating system using second privileged process
AssigneeGoogle Inc.
InventorsJulien Tinnes, Tavis Ormandy
Life of this patent
Estimating the term…
Abstract
Some embodiments provide a system that restricts privileges for a target process in an operating system. During operation, the system receives a request from the target process to restrict the privileges. Next, the system executes a binary that processes the request using services provided by a kernel of the operating system.
Claims22
A computer-implemented method for restricting privileges for a target process in an operating system, comprising:
- receiving a request from the target process to restrict the privileges;
- and
- executing a binary that processes the request using services provided by a kernel of the operating system,
- wherein the privileges are associated with filesystem access, and wherein restricting filesystem access for the target process involves:
- cloning the target process to:
- create a privileged process;
- and
- share filesystem information between the target process and the privileged process.
A computer-implemented method for restricting privileges for a target process in an operating system, comprising:
- receiving a request from the target process to restrict the privileges;
- and
- executing a binary that processes the request using services provided by a kernel of the operating system,
- wherein the privileges are associated with network access, and wherein restricting network access for the target process involves:
- cloning the target process to:
- create a privileged process;
- and
- share file descriptor information between the target process and the privileged process;
- and
- disabling the creation of new file descriptors from the target process to disable the creation of new network sockets from the target process.
A system for restricting privileges for a target process in an operating system, comprising:
- a hardware module;
- a non-transitory computer-readable storage medium including:
- a kernel of the operating system configured to receive a request from the target process to restrict the privileges;
- and
- a binary configured to process the request using services provided by the kernel, wherein the privileges are associated with filesystem access, and wherein restricting filesystem access for the target process involves:
- cloning the target process to:
- create a privileged process;
- and
- share information between the target process and the privileged process.
A system for restricting privileges for a target process in an operating system, comprising:
- a hardware module;
- a non-transitory computer-readable storage medium including:
- a kernel of the operating system configured to receive a request from the target process to restrict the privileges;
- and
- a binary configured to process the request using services provided by the kernel, wherein the privileges are associated with network access, and wherein restricting network access for the target process involves:
- cloning the target process to:
- create a privileged process;
- and
- share file descriptor information between the target process and the privileged process;
- and
- disabling the creation of new file descriptors from the target process to disable the creation of new network sockets from the target process.
A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for restricting privileges for a target process in an operating system, the method comprising:
- receiving a request from the target process to restrict the privileges;
- and
- executing a binary that processes the request using services provided by a kernel of the operating system,
- wherein the privileges are associated with filesystem access, and wherein restricting filesystem access for the target process involves:
- cloning the target process to:
- create a privileged process;
- and
- share filesystem information between the target process and the privileged process.
A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for restricting privileges for a target process in an operating system, the method comprising:
- receiving a request from the target process to restrict the privileges;
- and
- executing a binary that processes the request using services provided by a kernel of the operating system,
- wherein the privileges are associated with network access, and wherein restricting network access for the target process involves:
- cloning the target process to:
- create a privileged process;
- and
- share file descriptor information between the target process and the privileged process;
- and
- disabling the creation of new file descriptors from the target process to disable the creation of new network sockets from the target process.
A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method comprising:
- receiving, from a non-root target process in an operating system, a request to restrict the privileges for the non-root target process itself;
- and
- executing, as a root process, a binary that processes the request using services provided by a kernel of the operating system and restricts the privileges for the non-root target process as a result of processing the request, wherein the privileges for the non-root target process are associated with network access, and wherein executing the binary includes cloning the target process to generate a first privileged process while sharing a network socket between the target process and a second privileged process, and sharing file descriptor information between the first privileged process and the second privileged process through the network socket.
Dependencies are inferred from the claim text.