From owner-freebsd-questions@FreeBSD.ORG  Wed Dec  1 02:59:53 2004
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6F87D16A4CE
	for <freebsd-questions@freebsd.org>;
	Wed,  1 Dec 2004 02:59:53 +0000 (GMT)
Received: from obsecurity.dyndns.org
	(CPE0050040655c8-CM00111ae02aac.cpe.net.cable.rogers.com [69.194.102.143])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3B21143D45
	for <freebsd-questions@freebsd.org>;
	Wed,  1 Dec 2004 02:59:53 +0000 (GMT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 4E098512B2; Tue, 30 Nov 2004 19:05:07 -0800 (PST)
Date: Tue, 30 Nov 2004 19:05:07 -0800
From: Kris Kennaway <kris@obsecurity.org>
To: Rob <spamrefuse@yahoo.com>
Message-ID: <20041201030507.GA7780@xor.obsecurity.org>
References: <i7zrgv.nbrl0k@webmail.tuwien.ac.at>
	<20041130151055.GB45768@ei.bzerk.org> <41AD1FF1.6030203@yahoo.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="SUOF0GtieIMvvwua"
Content-Disposition: inline
In-Reply-To: <41AD1FF1.6030203@yahoo.com>
User-Agent: Mutt/1.4.2.1i
cc: FreeBSD <freebsd-questions@freebsd.org>
Subject: Re: proc filesystem
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Dec 2004 02:59:53 -0000


--SUOF0GtieIMvvwua
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Dec 01, 2004 at 10:35:45AM +0900, Rob wrote:
> Ruben de Groot wrote:
> >
> >/proc is considered (and has demonstrated to be) a security
> >risk and has therefore been disabled by default in FreeBSD 5.x
>=20
> What security risks?
> Same with linproc (mounted as /compat/linux/proc)?

See any number of security advisories.  It's not that there are known
vulnerabilities remaining, it's that the very nature of what a procfs
is means that there are likely to be other vulnerabilities waiting to
be discovered.

Kris

--SUOF0GtieIMvvwua
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBrTTiWry0BWjoQKURAuxDAJ4hV7ndxiYNqZ1C/rVOPpdnxW6+igCffiDN
G0hvVAiuSypEN/4GqDen440=
=HCu2
-----END PGP SIGNATURE-----

--SUOF0GtieIMvvwua--