From owner-freebsd-security Mon Aug 28 14:40:48 2000 Delivered-To: freebsd-security@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id 8ACF337B42C; Mon, 28 Aug 2000 14:40:43 -0700 (PDT) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.9.3/8.9.3) with SMTP id RAA88845; Mon, 28 Aug 2000 17:40:28 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Mon, 28 Aug 2000 17:40:28 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Bruce Evans Cc: freebsd-security@FreeBSD.ORG, phk@FreeBSD.ORG, green@FreeBSD.ORG Subject: Re: Review request: replacing p_trespass(), modifications to vaccess() In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I've updated p_stuff.diff to include a few more procfs fixes, correcting the ability of "touch /proc/pid" testing to see if the pid is real under jail/ps_showallprocs=0. I've also, at the suggestion of John Baldwin, combined the p_can* functions into a single p_can(p1, p2, operation, privused) call, which while a little visually less pleasing (P_CAN_SEE, ...) is probably happier from an abstraction point of view. Assuming no one raises any further issues, I will go ahead and commit that Tuesday night sometime. Robert N M Watson robert@fledge.watson.org http://www.watson.org/~robert/ PGP key fingerprint: AF B5 5F FF A6 4A 79 37 ED 5F 55 E9 58 04 6A B1 TIS Labs at Network Associates, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message