From owner-cvs-all  Sun Jul 14 13: 2:25 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 73AAB37B400; Sun, 14 Jul 2002 13:02:19 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C43AF43E5E; Sun, 14 Jul 2002 13:02:18 -0700 (PDT)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (fledge.pr.watson.org [192.0.2.3])
	by fledge.watson.org (8.12.4/8.12.4) with SMTP id g6EK2CbM040025;
	Sun, 14 Jul 2002 16:02:12 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Date: Sun, 14 Jul 2002 16:02:11 -0400 (EDT)
From: Robert Watson <rwatson@FreeBSD.org>
X-Sender: robert@fledge.watson.org
To: "Crist J. Clark" <cjc@FreeBSD.org>
Cc: David Malone <dwmalone@maths.tcd.ie>,
	Luigi Rizzo <luigi@FreeBSD.org>,
	Giorgos Keramidas <keramida@FreeBSD.org>, cvs-committers@FreeBSD.org,
	cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/usr.bin/talk display.c talk.1 talk.c
In-Reply-To: <20020714191147.GE56656@blossom.cjclark.org>
Message-ID: <Pine.NEB.3.96L.1020714155950.25880G-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG


On Sun, 14 Jul 2002, Crist J. Clark wrote:

> On Sun, Jul 14, 2002 at 12:33:20PM -0400, Robert Watson wrote:
> > On Sun, 14 Jul 2002, David Malone wrote:
> 
> [snip]
> 
> > > Isn't this what kern.ps_showallprocs is for? I've always considered ps
> > > and w showing what other people are doing a good way for users to learn
> > > new commands. 
> > 
> > kern.ps_showallprocs in -stable was simply a mib setting to tell ps to
> > ignore other users.
> 
> kern.ps_showallprocs is enforced in the kernel. It prevents the kernel
> from returning a list of all processes to ps(1) or anything else (see
> src/sys/kern/kern_proc.c). 

It doesn't enforce against procfs access, and it doesn't prevent pid space
scanning using signalling, debugging, scheduling primitives, etc. 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Network Associates Laboratories


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message