From owner-freebsd-security Thu Apr 16 19:37:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA23507 for freebsd-security-outgoing; Thu, 16 Apr 1998 19:37:52 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from set.spradley.tmi.net (set.spradley.tmi.net [207.170.107.99]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id CAA23286; Fri, 17 Apr 1998 02:36:48 GMT (envelope-from tsprad@set.spradley.tmi.net) Received: from localhost (set.spradley.tmi.net) [127.0.0.1] by set.spradley.tmi.net with esmtp (Exim 1.82 #2) id 0yQ0zz-000653-00; Thu, 16 Apr 1998 21:35:31 -0500 X-Mailer: exmh version 2.0zeta 7/24/97 To: dima@best.net cc: tweten@frihet.com, louie@TransSys.COM, trost@cloud.rain.com, stable@FreeBSD.ORG, freebsd-security@FreeBSD.ORG Subject: Re: kernel permissions In-reply-to: Your message of "Thu, 16 Apr 1998 16:07:11 PDT." <199804162307.QAA10457@burka.rdy.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Thu, 16 Apr 1998 21:35:31 -0500 From: Ted Spradley Message-Id: Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk > Ted Spradley writes: > > > Excuse me? What are they (users) going to do with kernel name list > > > besides attempting to hack your machine? > > > > No, you've missed Mr. Tweten's point. You don't get to ask. *You* have > > to prove that there's *nothing* else they could get from reading the > > kernel. > > How can I prove that there's nothing else they can get from reading my kernel, > if I'm trying to prove opposite? You have to prove that there is nothing else besides attempting to hack your machine that these users could possibly get from reading the kernel. That is, you have to prove your assertion that there is nothing useful that users could get from reading the kernel. I just wanted to clarify my wording. I've had quite enough of this subject. We've already wasted far more effort on the discussion than I was attempting to save by preventing a gratuitous change. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message