From owner-freebsd-arch Wed Jul 26 23:25:24 2000 Delivered-To: freebsd-arch@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id A834E37C037 for ; Wed, 26 Jul 2000 23:25:19 -0700 (PDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.9.3/8.9.3) with ESMTP id AAA34938; Thu, 27 Jul 2000 00:25:16 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id AAA36358; Thu, 27 Jul 2000 00:25:13 -0600 (MDT) Message-Id: <200007270625.AAA36358@harmony.village.org> To: John Polstra Subject: Re: How much security should ldconfig enforce? Cc: arch@FreeBSD.ORG In-reply-to: Your message of "Wed, 26 Jul 2000 19:36:13 PDT." References: Date: Thu, 27 Jul 2000 00:25:12 -0600 From: Warner Losh Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message John Polstra writes: : I am building a bike shed, and I was wondering if you could advise : me about what color it should be. :-) 'Blue, no green' : What do you folks think about this? I see two types of system on a regular basis. One is where you are running stock everything and writable anything is a big problem. The other is where I'm developing things all over the place and want shared libaries to be writable or at least the dirs they are in. Sometimes I'll want to further have ldconfig these dirs too. So, my suggestion would be to have -S option. That way people that want to have extra high security can have it. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message