From owner-freebsd-hackers Tue Sep 24 9: 6:14 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 62D2237B401 for ; Tue, 24 Sep 2002 09:06:13 -0700 (PDT) Received: from pop3.psconsult.nl (ps226.psconsult.nl [193.67.147.226]) by mx1.FreeBSD.org (Postfix) with ESMTP id D579043E86 for ; Tue, 24 Sep 2002 09:06:05 -0700 (PDT) (envelope-from paul@pop3.psconsult.nl) Received: (from paul@localhost) by pop3.psconsult.nl (8.9.2/8.9.2) id RAA37942; Tue, 24 Sep 2002 17:43:31 +0200 (CEST) (envelope-from paul) Date: Tue, 24 Sep 2002 17:43:31 +0200 From: Paul Schenkeveld To: tho Cc: Paul Schenkeveld , freebsd-hackers@FreeBSD.ORG Subject: Re: Just a wild idea Message-ID: <20020924174331.A37898@psconsult.nl> References: <20020922161453.A13323@psconsult.nl> <20020924013159.A371@xyz.com-and.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <20020924013159.A371@xyz.com-and.com>; from thomas.fossati@tin.it on Tue, Sep 24, 2002 at 01:31:59AM +0200 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi Thomas, On Tue, Sep 24, 2002 at 01:31:59AM +0200, tho wrote: > hi Paul, > > have you considered using a "file descriptor passing" based technique > (section 14.7 of Stevens' UNPv1) ? > > you may have a process with suser privs which creates file descriptors > (e.g. socket bind()ed to a particular address and port) on demand and then > passes back the descriptor to the requesting (unprivileged) process through > a unix domain socket I know this technique but the real issue is about many pieces of standard software, like BIND named, sendmail, syslogd and so on. So this technique, although very usable for new projects, will not solve this problem. > tho Thanks for your answer, Paul Schenkeveld To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message