Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Jun 2000 08:38:37 -0700 (PDT)
From:      Brian Fundakowski Feldman <green@FreeBSD.org>
To:        James Howard <howardjp@wam.umd.edu>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Network ACLs
Message-ID:  <Pine.BSF.4.21.0006210836270.14479-100000@builder.freebsd.org>
In-Reply-To: <200006202237.SAA20291@rac10.wam.umd.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 20 Jun 2000, James Howard wrote:

> I know that the TrustedBSD group is working on filesystem ACLs.  Will
> something similar be extended to the socket interface?

Robert Watson and I were discussing this and ACLs in general over the
day, and yes, at one point, I will make sure that sockets have ACL
information.  Basically, the information must be that it inherits the
parent's credentials, but right now the parents credentials are still
ucred and not ACLs.

It'll come along when ACLs become more pervasive, perhaps after
Poligraph is done if that is what it takes.  We'll see :)

> Thanks, Jamie

-- 
 Brian Fundakowski Feldman           /  "Any sufficiently advanced bug is    \
 green@FreeBSD.org                   |   indistinguishable from a feature."  |
     FreeBSD: The Power to Serve!    \        -- Rich Kulawiec               /



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0006210836270.14479-100000>