From owner-cvs-all Mon Nov 27 21:29: 6 2000 Delivered-To: cvs-all@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.66]) by hub.freebsd.org (Postfix) with ESMTP id 8A5D437B479; Mon, 27 Nov 2000 21:29:02 -0800 (PST) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.11.0/8.11.0) with ESMTP id eAS5T1Q59022; Mon, 27 Nov 2000 22:29:01 -0700 (MST) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id WAA07456; Mon, 27 Nov 2000 22:29:00 -0700 (MST) Message-Id: <200011280529.WAA07456@harmony.village.org> To: Robert Watson Subject: Re: cvs commit: src/usr.sbin/inetd builtins.c Cc: Peter Wemm , "Brian F. Feldman" , Alfred Perlstein , obrien@FreeBSD.org, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org In-reply-to: Your message of "Mon, 27 Nov 2000 00:52:29 EST." References: Date: Mon, 27 Nov 2000 22:29:00 -0700 From: Warner Losh Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message Robert Watson writes: : Presumably the only really correct solution here is to: : : 1) Set effective process rights to that of the user in question using : setusercontext() : 2) Open the file using open() : 3) fstat() the file to determine that it is regular and sane : 4) Proceed with operations I'm not sure I understand the need for #3. If the effective process rights are what you want, then the kernel will enforce protections at #2. What's is regular and sane? Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message