From owner-freebsd-arch@FreeBSD.ORG  Fri Dec 30 16:48:23 2011
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: arch@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 79DC6106564A;
	Fri, 30 Dec 2011 16:48:23 +0000 (UTC)
	(envelope-from kostikbel@gmail.com)
Received: from mail.zoral.com.ua (mx0.zoral.com.ua [91.193.166.200])
	by mx1.freebsd.org (Postfix) with ESMTP id DAE218FC08;
	Fri, 30 Dec 2011 16:48:22 +0000 (UTC)
Received: from alf.home (alf.kiev.zoral.com.ua [10.1.1.177])
	by mail.zoral.com.ua (8.14.2/8.14.2) with ESMTP id pBUGksXn040752
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Fri, 30 Dec 2011 18:46:54 +0200 (EET)
	(envelope-from kostikbel@gmail.com)
Received: from alf.home (kostik@localhost [127.0.0.1])
	by alf.home (8.14.5/8.14.5) with ESMTP id pBUGksAR021712;
	Fri, 30 Dec 2011 18:46:54 +0200 (EET)
	(envelope-from kostikbel@gmail.com)
Received: (from kostik@localhost)
	by alf.home (8.14.5/8.14.5/Submit) id pBUGkrCN021711;
	Fri, 30 Dec 2011 18:46:53 +0200 (EET)
	(envelope-from kostikbel@gmail.com)
X-Authentication-Warning: alf.home: kostik set sender to kostikbel@gmail.com
	using -f
Date: Fri, 30 Dec 2011 18:46:53 +0200
From: Kostik Belousov <kostikbel@gmail.com>
To: Poul-Henning Kamp <phk@phk.freebsd.dk>
Message-ID: <20111230164653.GQ50300@deviant.kiev.zoral.com.ua>
References: <20111230142640.GO50300@deviant.kiev.zoral.com.ua>
	<29241.1325260839@critter.freebsd.dk>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="JIZzZL2Ew2M9i6mq"
Content-Disposition: inline
In-Reply-To: <29241.1325260839@critter.freebsd.dk>
User-Agent: Mutt/1.4.2.3i
X-Virus-Scanned: clamav-milter 0.95.2 at skuns.kiev.zoral.com.ua
X-Virus-Status: Clean
X-Spam-Status: No, score=-3.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00
	autolearn=ham version=3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
	skuns.kiev.zoral.com.ua
Cc: kan@freebsd.org, Dag-Erling Sm??rgrav <des@des.no>,
	Xin LI <delphij@gmail.com>, arch@freebsd.org
Subject: Re: fdlopen(3)
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussion related to FreeBSD architecture <freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Dec 2011 16:48:23 -0000


--JIZzZL2Ew2M9i6mq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Dec 30, 2011 at 04:00:39PM +0000, Poul-Henning Kamp wrote:
> In message <20111230142640.GO50300@deviant.kiev.zoral.com.ua>, Kostik Bel=
ousov=20
> writes:
>=20
> >Presented use case for fdlopen(3) is valid and useful IMO.
>=20
> I agree, I even have a similar use-case in Varnish.
>=20
> Has anybody racked their brains to make sure this doesn't have security
> implications ?

I am wondering what kind of security consequences you have in mind ?

My initial concern with the patch was the lack of the name supplied for
the loaded dso. But, the rtld already adds DT_SONAME to the names of the
object, and later it checks for duplicates using vnode identity returned
by fstat(2), so I removed the name argument from API.

--JIZzZL2Ew2M9i6mq
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iEYEARECAAYFAk796v0ACgkQC3+MBN1Mb4g8UQCglkXyv0/QLWbQqkumCNGImiHo
5LYAoJBgMhb7R8U9I0n+709OzlLCxwCj
=U4Bd
-----END PGP SIGNATURE-----

--JIZzZL2Ew2M9i6mq--