Date: Sat, 24 Dec 2011 02:26:20 -0800 From: Xin LI <delphij@gmail.com> To: Andrey Chernov <ache@freebsd.org>, Kostik Belousov <kostikbel@gmail.com>, Alexander Kabaev <kabaev@gmail.com>, John Baldwin <jhb@freebsd.org>, Colin Percival <cperciva@freebsd.org>, src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r228843 - head/contrib/telnet/libtelnet head/crypto/heimdal/appl/telnet/libtelnet head/include head/lib/libc/gen head/lib/libc/iconv head/lib/libc/include head/lib/libc/net head/libexec... Message-ID: <CAGMYy3s4YM-j165o9p%2BEDgMf0%2BaJq7gKj5yR=LK8_yfECnbtog@mail.gmail.com> In-Reply-To: <20111224100509.GA98136@vniz.net> References: <201112231500.pBNF0c0O071712@svn.freebsd.org> <201112231058.46642.jhb@freebsd.org> <201112231122.34436.jhb@freebsd.org> <20111223120644.75fe944d@kan.dyndns.org> <20111223175143.GJ50300@deviant.kiev.zoral.com.ua> <20111224100509.GA98136@vniz.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Dec 24, 2011 at 2:05 AM, Andrey Chernov <ache@freebsd.org> wrote: > On Fri, Dec 23, 2011 at 07:51:43PM +0200, Kostik Belousov wrote: >> The __FreeBSD_libc_enter_restricted_mode() is, and its name is ugly >> exactly to note the ugly intent. I do not see how the symbol can go > > There must be no ugly intents and names. This whole idea just proves yet > one our @secteam ugliness. > > There must be ischroot(2) the same way we already have issetugid(2). chroot(2) can create legitimate and secure environment where dlopen(2) is safe and necessary. Cheers, -- Xin LI <delphij@delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAGMYy3s4YM-j165o9p%2BEDgMf0%2BaJq7gKj5yR=LK8_yfECnbtog>