From owner-freebsd-security  Wed Oct 20 20:45:17 1999
Delivered-To: freebsd-security@freebsd.org
Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44])
	by hub.freebsd.org (Postfix) with ESMTP id 63ABC14D93
	for <freebsd-security@FreeBSD.ORG>; Wed, 20 Oct 1999 20:45:13 -0700 (PDT)
	(envelope-from cy@cschuber.net.gov.bc.ca)
Received: (from daemon@localhost)
	by point.osg.gov.bc.ca (8.8.7/8.8.8) id UAA07590;
	Wed, 20 Oct 1999 20:45:07 -0700
Received: from cschuber.net.gov.bc.ca(142.31.240.113), claiming to be "cwsys.cwsent.com"
 via SMTP by point.osg.gov.bc.ca, id smtpda07584; Wed Oct 20 20:44:52 1999
Received: (from uucp@localhost)
	by cwsys.cwsent.com (8.9.3/8.9.1) id UAA41185;
	Wed, 20 Oct 1999 20:44:32 -0700 (PDT)
Message-Id: <199910210344.UAA41185@cwsys.cwsent.com>
Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys"
 via SMTP by localhost.cwsent.com, id smtpdT41178; Wed Oct 20 20:44:02 1999
X-Mailer: exmh version 2.1.0 09/18/1999
Reply-To: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
X-OS: FreeBSD 3.3-RELEASE
X-Sender: cy
To: Allan Saddi <asaddi@philosophysw.com>
Cc: Steve Reid <sreid@sea-to-sky.net>,
	Antoine Beaupre <beaupran@IRO.UMontreal.CA>,
	Mike Nowlin <mike@argos.org>,
	"Rashid N. Achilov" <shelton@sentry.granch.ru>,
	freebsd-security@FreeBSD.ORG
Subject: Re: kern.securelevel and X 
In-reply-to: Your message of "Fri, 15 Oct 1999 14:34:57 PDT."
             <Pine.BSF.4.10.9910151431080.59290-100000@main.nwserv.com> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Wed, 20 Oct 1999 20:44:01 -0700
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In message <Pine.BSF.4.10.9910151431080.59290-100000@main.nwserv.com>, Allan Sa
ddi writes:
> On Fri, 15 Oct 1999, Steve Reid wrote:
> 
> > But I don't think FreeBSD has that capability. I haven't seen any
> > mention of a FreeBSD aperture driver, not even in vaporware form.
> > Maybe people just don't realize such a thing is possible?
> 
> I used to run X with high securelevels back in 2.2.x. I simply started
> X/xdm before upping the securelevel. This seemed to work fine. I haven't
> verified that it still works w/ 3.x, however.

That was before the mmap security fix.


Regards,                       Phone:  (250)387-8437
Cy Schubert                      Fax:  (250)387-5766
Sun/DEC Team, UNIX Group    Internet:  Cy.Schubert@uumail.gov.bc.ca
ITSD                                   Cy.Schubert@gems8.gov.bc.ca
Province of BC
                      "e**(i*pi)+1=0"





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message