From owner-freebsd-hackers  Sun Oct 28  9:25: 9 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from scaup.prod.itd.earthlink.net (scaup.mail.pas.earthlink.net [207.217.121.49])
	by hub.freebsd.org (Postfix) with ESMTP
	id E747D37B403; Sun, 28 Oct 2001 09:25:05 -0800 (PST)
Received: from dialup-209.245.128.59.dial1.sanjose1.level3.net ([209.245.128.59] helo=mindspring.com)
	by scaup.prod.itd.earthlink.net with esmtp (Exim 3.33 #1)
	id 15xtgF-0006P9-00; Sun, 28 Oct 2001 09:25:04 -0800
Message-ID: <3BDC3FA2.20D5D914@mindspring.com>
Date: Sun, 28 Oct 2001 09:25:54 -0800
From: Terry Lambert <tlambert2@mindspring.com>
Reply-To: tlambert2@mindspring.com
X-Mailer: Mozilla 4.7 [en]C-CCK-MCD {Sony}  (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
To: Garance A Drosihn <drosih@rpi.edu>
Cc: Mike Barcroft <mike@FreeBSD.ORG>, hackers@FreeBSD.ORG
Subject: Re: syslogd and kqueue
References: <20011026233957.A9925@parhelion.firedrake.org>
	 <20011026200436.A61058@xor.obsecurity.org>
	 <20011027043342.A18231@parhelion.firedrake.org>
	 <20011027001704.B2586@coffee.q9media.com>
	 <3BDAFD1C.B7BF7ED4@mindspring.com> <p05101005b800e4c90608@[128.113.24.47]>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

Garance A Drosihn wrote:
> >Until newsyslog is fixed to not be able to stage a
> >denial of service attack against you, I really, really
> >recommend against its use.
> 
> Seems like it would be more user-friendly (to freebsd users
> in general) to fix newsyslog, instead of just telling people
> that they should not use it...  If people "just don't use"
> newsyslog, how does that guarantee that whatever they do
> use will not have the same problem that you described?

They will have to make their own solutions correct.

Every engineer is responsible for the correctness of their
code.  All I'[m saying here is that there is a known level
of incorrectness in newsyslog: use it at your peril.

If you want to fix it, I'm sure people would appreciate the
effort.

-- Terry

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message