Zirui Song

LiCA: A Fine-grained and Path-sensitive Linux Capability Analysis Framework

2022

The capability mechanism in Linux-based systems is designed for dispersing the root privileges into a set of more refined capabilities, making programs gain no-more-necessary privileges. However, it is challenging to check the necessity and sufficiency …