From owner-cvs-all Sun Jul 14 9:14:47 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 777E837B400; Sun, 14 Jul 2002 09:14:41 -0700 (PDT) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id DAF5443E70; Sun, 14 Jul 2002 09:14:40 -0700 (PDT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.12.4/8.12.4) with SMTP id g6EGEZbM026175; Sun, 14 Jul 2002 12:14:35 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Sun, 14 Jul 2002 12:14:35 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Luigi Rizzo Cc: Giorgos Keramidas , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/usr.bin/talk display.c talk.1 talk.c In-Reply-To: <20020714082543.B74633@iguana.icir.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sun, 14 Jul 2002, Luigi Rizzo wrote: > On Sun, Jul 14, 2002 at 06:12:33PM +0300, Giorgos Keramidas wrote: > ... > > Damn. Now I can't use ps/who to find out who's talking to whom! > > but you can still see that they are using "talk". > > "ps" and friends are full of privacy violation, as they allow > unprivileged users to peek at what others are doing by liberally > showing program arguments (though they can be hidden by setproctitle, > but almost nobody does that) and program names (which cannot even > be hidden). > > I think this part should be seriously revised > (you in Bcc, are you listening ? :) FreeBSD 5.0-CURRENT supports 'security.bsd.bsd_see_other_uids' which limits the flow of inter-user information. Try setting it to 0 sometime. The trustedbsd_mac version which will get committed in a week or so actually also supports a series of exemptions, such as exempting based on having the same primary group, or belonging to a specific group (such as wheel or operator). We used this setting on election.uk.FreeBSD.org to prevent less desirable information flow. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Network Associates Laboratories To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message