From owner-freebsd-bugs@FreeBSD.ORG Mon Nov 26 23:30:02 2012 Return-Path: Delivered-To: freebsd-bugs@smarthost.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 41054BBC for ; Mon, 26 Nov 2012 23:30:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 25A388FC18 for ; Mon, 26 Nov 2012 23:30:02 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id qAQNU1wN002007 for ; Mon, 26 Nov 2012 23:30:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id qAQNU18E002006; Mon, 26 Nov 2012 23:30:01 GMT (envelope-from gnats) Date: Mon, 26 Nov 2012 23:30:01 GMT Message-Id: <201211262330.qAQNU18E002006@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Eitan Adler Subject: Re: kern/21463: [linux] Linux compatability mode should not allow setuid programs X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: Eitan Adler List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 23:30:02 -0000 The following reply was made to PR kern/21463; it has been noted by GNATS. From: Eitan Adler To: bug-followup@freebsd.org Cc: Subject: Re: kern/21463: [linux] Linux compatability mode should not allow setuid programs Date: Mon, 26 Nov 2012 18:24:10 -0500 ---------- Forwarded message ---------- From: Marcin Cieslak Date: 26 November 2012 16:24 Subject: Re: kern/21463: [linux] Linux compatability mode should not allow setuid programs To: freebsd-emulation@freebsd.org We implement AT_UID and AT_GID process auxillary vector (procstat -x) elements so at least userland library (such as glibc) has a possibility to enter "secure mode" on startup. Not sure if there is anything we can do more (except for disabling the feature altogether) to tell userland to be careful. //Marcin _______________________________________________ freebsd-emulation@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-emulation To unsubscribe, send any mail to "freebsd-emulation-unsubscribe@freebsd.org" -- Eitan Adler