From owner-freebsd-security Tue Jul 13 14:13:45 1999 Delivered-To: freebsd-security@freebsd.org Received: from alice.gba.oz.au (gba-254.tmx.com.au [203.9.155.254]) by hub.freebsd.org (Postfix) with SMTP id 5736014F9D for ; Tue, 13 Jul 1999 14:13:33 -0700 (PDT) (envelope-from gjb-freebsd@gba.oz.au) Received: (qmail 8503 invoked by uid 1001); 14 Jul 1999 07:11:40 +1000 Message-ID: <19990713211140.8502.qmail@alice.gba.oz.au> X-Posted-By: GBA-Post 1.03 20-Sep-1998 X-PGP-Fingerprint: 5A91 6942 8CEA 9DAB B95B C249 1CE1 493B 2B5A CE30 Date: Wed, 14 Jul 1999 07:11:39 +1000 From: Greg Black To: Garrett Wollman Cc: security@FreeBSD.ORG Subject: Re: Module magic References: <199907120945.TAA09669@cheops.anu.edu.au> <199907121736.NAA01917@khavrinen.lcs.mit.edu> <19990713010531.2897.qmail@alice.gba.oz.au> <199907131631.MAA05152@khavrinen.lcs.mit.edu> In-reply-to: <199907131631.MAA05152@khavrinen.lcs.mit.edu> of Tue, 13 Jul 1999 12:31:30 -0400 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Garrett Wollman writes: > > Are you saying that X does not work when securelevel >= 0 under > > FreeBSD? > > That is correct. X requires direct access to I/O space, which is > fundamentally incompatible with the notion of enhanced security. Can you explain how FreeBSD differs from BSDI in this? I've been running various BSDI releases for years with XiG's XAccel and securelevel set to 2 with no problems at all, and I had hoped to do the same with FreeBSD (albeit with XFree86 rather than XAccel). -- Greg Black -- or To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message