From owner-cvs-all  Sun Jul 14  9:39: 9 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 9B69737B405; Sun, 14 Jul 2002 09:39:03 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 90DA043E67; Sun, 14 Jul 2002 09:39:02 -0700 (PDT)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (fledge.pr.watson.org [192.0.2.3])
	by fledge.watson.org (8.12.4/8.12.4) with SMTP id g6EGcvbM026467;
	Sun, 14 Jul 2002 12:38:57 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Date: Sun, 14 Jul 2002 12:38:57 -0400 (EDT)
From: Robert Watson <rwatson@FreeBSD.org>
X-Sender: robert@fledge.watson.org
To: David Malone <dwmalone@maths.tcd.ie>
Cc: Luigi Rizzo <luigi@FreeBSD.org>,
	Giorgos Keramidas <keramida@FreeBSD.org>, cvs-committers@FreeBSD.org,
	cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/usr.bin/talk display.c talk.1 talk.c
In-Reply-To: <Pine.NEB.3.96L.1020714123154.25880D-100000@fledge.watson.org>
Message-ID: <Pine.NEB.3.96L.1020714123750.25880F-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG


On Sun, 14 Jul 2002, Robert Watson wrote:

> On Sun, 14 Jul 2002, David Malone wrote:
> 
> > On Sun, Jul 14, 2002 at 08:25:43AM -0700, Luigi Rizzo wrote:
> > > > Damn.  Now I can't use ps/who to find out who's talking to whom!
> > > 
> > > but you can still see that they are using "talk".
> > 
> > You can still figure out who is talking to who with netstat and fstat
> > I'd guess? 
> 
> The see_other_uids sysctl limits netstat information also.  Haven't
> looked at fstat -- once it uses sysctl, it should be easy to implement. 

FWIW, a quick glance shows that fstat still uses kmem, so the limits
aren't enforced on fstat.  We have a contract with DES that includes
moving fstat to using sysctl, and at that point the policy can be enforced
in-kernel in a mandatory manner.  We need this for the MAC work anyway.

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Network Associates Laboratories


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message