From owner-freebsd-current@FreeBSD.ORG Fri Jun 25 10:06:26 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F0DE916A4CE for ; Fri, 25 Jun 2004 10:06:26 +0000 (GMT) Received: from mailout1.informatik.tu-muenchen.de (mailout1.informatik.tu-muenchen.de [131.159.0.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id 60DD243D54 for ; Fri, 25 Jun 2004 10:06:26 +0000 (GMT) (envelope-from barner@in.tum.de) Received: by zi025.glhnet.mhn.de (Postfix, from userid 1000) id 9701D3FA9; Fri, 25 Jun 2004 12:04:57 +0200 (CEST) Date: Fri, 25 Jun 2004 12:04:57 +0200 From: Simon Barner To: Boris Popov Message-ID: <20040625100457.GA87998@zi025.glhnet.mhn.de> References: <200406210450.39636.lesha@intercaf.ru> <20040622153317.W79584@carver.gumbysoft.com> <20040623002120.GA31046@zi025.glhnet.mhn.de> <20040625062458.GA58310@vertex.kz> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040625062458.GA58310@vertex.kz> User-Agent: Mutt/1.5.6i X-Virus-Scanned: by amavisd-new at informatik.tu-muenchen.de cc: freebsd-current@freebsd.org cc: AK Subject: Re: vfs.usermount not working anymore on SMB shares? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2004 10:06:27 -0000 [...] > > Only for two operations (one of which is the iconv table manipulation), > > mount_smbfs very briefly switches back to uid 0. > > Right, they're needed user mounts to work and this is less evil > choice in the terms of security, but still, not very perfect. The reason > is simple: by abusing ability to load kernel tables user can intentionally > fill all of the kernel memory. Ah, ok. But could he do that, too, by creating a large numbers of mount points? One had to introduce a per user limit for the number of file systems mounted, and also for the number of iconv tables loaded. [...] > The simplest solution is to preload all necessary conversion > tables via creating some mount points as root. iconv interface will reuse > them for all subsequent user mounts. > > The more proper solution will be an userland utility which can > preload tables at boot time. And an accompanying rc.conf hook, like iconv_preload=... I like that idea a lot, and I'll see that I'll get it implemented soon[tm]. Regards, Simon