From owner-cvs-all@FreeBSD.ORG Thu Jun 26 11:02:15 2008 Return-Path: Delivered-To: cvs-all@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 114ED106564A; Thu, 26 Jun 2008 11:02:15 +0000 (UTC) (envelope-from amdmi3@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id EDA0D8FC1C; Thu, 26 Jun 2008 11:02:14 +0000 (UTC) (envelope-from amdmi3@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m5QB2E2c080331; Thu, 26 Jun 2008 11:02:14 GMT (envelope-from amdmi3@repoman.freebsd.org) Received: (from amdmi3@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m5QB2E5o080330; Thu, 26 Jun 2008 11:02:14 GMT (envelope-from amdmi3) Message-Id: <200806261102.m5QB2E5o080330@repoman.freebsd.org> From: Dmitry Marakasov Date: Thu, 26 Jun 2008 11:02:14 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/sysutils Makefile ports/sysutils/kiconvtool Makefile distinfo pkg-descr X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Jun 2008 11:02:15 -0000 amdmi3 2008-06-26 11:02:14 UTC FreeBSD ports repository Modified files: sysutils Makefile Added files: sysutils/kiconvtool Makefile distinfo pkg-descr Log: On FreeBSD, it's possible to allow plain users to mount filesystems without using su or sudo. This is enabled via vfs.usermount sysctl. However, if file name conversion is used when mounting a filesystem, in most cases mount will fail with `mount_XXX: XXX_iconv: Operation not permitted denied' error. This is caused by the fact that character set conversion tables need to be loaded into kernel, but, apart from mounting, that's not allowed to plain users, because charset tables are large enough to initiate a denial of service by filling kernel memory with many tables. This utility allows you to load only specific charset tables into kernel, so usermounts with file name conversions won't fail and in the same time it's not possible to bring the system down by filling kernel memory. WWW: http://wiki.freebsd.org/DmitryMarakasov/kiconvtool Approved by: miwi (mentor) Revision Changes Path 1.1025 +1 -0 ports/sysutils/Makefile 1.1 +33 -0 ports/sysutils/kiconvtool/Makefile (new) 1.1 +3 -0 ports/sysutils/kiconvtool/distinfo (new) 1.1 +16 -0 ports/sysutils/kiconvtool/pkg-descr (new)