From owner-cvs-all  Fri Oct 19 10:40:40 2001
Delivered-To: cvs-all@freebsd.org
Received: from whale.sunbay.crimea.ua (whale.sunbay.crimea.ua [212.110.138.65])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7CC5037B401; Fri, 19 Oct 2001 10:40:17 -0700 (PDT)
Received: (from ru@localhost)
	by whale.sunbay.crimea.ua (8.11.6/8.11.2) id f9JHdm433704;
	Fri, 19 Oct 2001 20:39:48 +0300 (EEST)
	(envelope-from ru)
Date: Fri, 19 Oct 2001 20:39:48 +0300
From: Ruslan Ermilov <ru@FreeBSD.org>
To: Brian Somers <brian@freebsd-services.com>
Cc: Brian Somers <brian@FreeBSD.org>, cvs-committers@FreeBSD.org,
	cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/usr.sbin/ppp arp.c
Message-ID: <20011019203948.J24666@sunbay.com>
References: <ru@FreeBSD.org> <200110191718.f9JHI9b01870@hak.lan.Awfulhak.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200110191718.f9JHI9b01870@hak.lan.Awfulhak.org>; from brian@freebsd-services.com on Fri, Oct 19, 2001 at 06:18:09PM +0100
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

On Fri, Oct 19, 2001 at 06:18:09PM +0100, Brian Somers wrote:
> > On Fri, Oct 19, 2001 at 09:52:15AM -0700, Brian Somers wrote:
> > > brian       2001/10/19 09:52:15 PDT
> > > 
> > >   Modified files:        (Branch: NETGRAPH)
> > >     usr.sbin/ppp         arp.c 
> > >   Log:
> > >   MFC: Write static arp entries as uid 0
> > >   
> > >   Revision  Changes    Path
> > >   1.38.2.4  +2 -2      src/usr.sbin/ppp/arp.c
> > > 
> > So that was indeed required after my rtsock.c changes?
> 
> Yes - previously ppp used to depend on the fact that it opened the 
> SOCK_RAW socket as uid 0.  Now it must have uid 0 when it writes to 
> the socket too.
> 
I recall telling you that OpenBSD should be vulnerable to this
too, and you told you'll have to check this.


Cheers,
-- 
Ruslan Ermilov		Oracle Developer/DBA,
ru@sunbay.com		Sunbay Software AG,
ru@FreeBSD.org		FreeBSD committer,
+380.652.512.251	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message