From owner-freebsd-audit Thu Feb 1 17:11:31 2001 Delivered-To: freebsd-audit@freebsd.org Received: from obsecurity.org (adsl-64-169-104-72.dsl.lsan03.pacbell.net [64.169.104.72]) by hub.freebsd.org (Postfix) with ESMTP id 9EBBE37B491 for ; Thu, 1 Feb 2001 17:11:14 -0800 (PST) Received: by obsecurity.org (Postfix, from userid 1000) id 773C9BA0CB; Thu, 1 Feb 2001 17:11:45 -0800 (PST) Date: Thu, 1 Feb 2001 17:11:45 -0800 From: Kris Kennaway To: Thomas Moestl Cc: freebsd-audit@FreeBSD.ORG Subject: Re: patch to remove setgid kmem from top Message-ID: <20010201171145.A75869@xor.obsecurity.org> References: <20010202015844.A1246@crow.dom2ip.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="mP3DRpeJDSE+ciuQ" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010202015844.A1246@crow.dom2ip.de>; from tmoestl@gmx.net on Fri, Feb 02, 2001 at 01:58:44AM +0100 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --mP3DRpeJDSE+ciuQ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Feb 02, 2001 at 01:58:44AM +0100, Thomas Moestl wrote: > I have prepared a set of patches that allow running top as an ordinary > user without setgid kmem.=20 Excellent! > One sysctl, kern.lastpid, had to be added for this. It exports the=20 > nextpid variable, which reflects the highest PID used up to now. Just to be clear, this isn't "the next PID which will be used by a forked process", but "the PID of the last created process"? I'm pretty sure the counter is incremented at fork-time (the issue is if we're doing random PID increments to defeat prediction, we obviously don't want to tip our hand). The latter is publically available information and I don't see an issue with this. Kris --mP3DRpeJDSE+ciuQ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6eglRWry0BWjoQKURAjfmAJ4uuQpWCjhfDLhLFZXlVy/ZGTvgNwCghmow 0+gxmf1hHHhh6dHNdYiKyM0= =dwqm -----END PGP SIGNATURE----- --mP3DRpeJDSE+ciuQ-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message