From owner-freebsd-current@FreeBSD.ORG Thu May 20 15:01:50 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7DA3B16A4CE for ; Thu, 20 May 2004 15:01:50 -0700 (PDT) Received: from genius.tao.org.uk (genius.tao.org.uk [212.135.162.51]) by mx1.FreeBSD.org (Postfix) with ESMTP id C59E543D46 for ; Thu, 20 May 2004 15:01:49 -0700 (PDT) (envelope-from joe@genius.tao.org.uk) Received: by genius.tao.org.uk (Postfix, from userid 100) id 0D7AB42DD; Thu, 20 May 2004 23:01:45 +0100 (BST) Date: Thu, 20 May 2004 23:01:45 +0100 From: Josef Karthauser To: freebsd-current@freebsd.org Message-ID: <20040520220145.GN4567@genius.tao.org.uk> Mail-Followup-To: Josef Karthauser , freebsd-current@freebsd.org Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="np3HfElajyDBpWGr" Content-Disposition: inline User-Agent: Mutt/1.5.6i Subject: Call for a hacker.... security.bsd.see_other_uids in jails only X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 May 2004 22:01:50 -0000 --np3HfElajyDBpWGr Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable I was wondering whether someone might help me out. There's a couple of sysctls in -current: security.bsd.see_other_uids: 1 security.bsd.see_other_gids: 1 These effectively allow one to prevent users from spying on each other. What I need to do is to disable these within jails, but not in the host enviroment. The reason I need this is that I'm running the FreeBSD election on a box of mine, but I don't want to have to clear these globally. Would someone have the time to hack me a patch to do this? It doesn't have to be clean, although evenually I'd like to see something like this committed to freebsd operating on a sysctl. Many thanks, joe p.s. the machine in question is running 5.2.1. --=20 Josef Karthauser (joe@tao.org.uk) http://www.josef-k.net/ FreeBSD (cvs meister, admin and hacker) http://www.uk.FreeBSD.org/ Physics Particle Theory (student) http://www.pact.cpes.sussex.ac.uk/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An eclectic mix of fact an= d theory. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --np3HfElajyDBpWGr Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iEYEARECAAYFAkCtKskACgkQXVIcjOaxUBZmKACgoFMPH56Bsp3VD7K/CKYL5uU5 XWgAnRIDXXjt4EndkIbRdM7ylTuKZx78 =zGZ0 -----END PGP SIGNATURE----- --np3HfElajyDBpWGr--