Date: Mon, 18 Oct 1999 10:21:47 -0500 From: Jacques Vidrine <n@nectar.com> To: Dag-Erling Smorgrav <des@flood.ping.uio.no> Cc: freebsd-arch@freebsd.org Subject: Re: kern.securelevel and X Message-ID: <19991018152147.609F71DA3@bone.nectar.com> In-Reply-To: <xzp90503esj.fsf@flood.ping.uio.no> References: <XFMail.991015111802.shelton@sentry.granch.ru> <Pine.LNX.4.05.9910150036170.5339-100000@jason.argos.org> <14343.23571.679909.243732@blm30.IRO.UMontreal.CA> <19991017012750.A812@fever.semiotek.com> <380A1E2C.CCA326F5@gorean.org> <19991018024704.A512@semiotek.com> <xzpyad12jd7.fsf@flood.ping.uio.no> <19991018043039.B1711@semiotek.com> <xzpso392gj0.fsf@flood.ping.uio.no> <19991018142633.D1DDB1DA3@bone.nectar.com> <xzp90503esj.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On 18 October 1999 at 16:49, Dag-Erling Smorgrav <des@flood.ping.uio.no> wrote: > With all due respect, *yuck* :) Well I expected gagging, but I thought there might be some details :-) > What EE suggested was to define a new SYSCTL macro to make defining > new security sysctls trivial. You'd do something like this: [snip] That's fine for system-wide stuff, but I'd like to see the ability to tweak this same stuff per-process. I see a system-wide data structure to hold this type of configuration information. Each process should also have a pointer to the system-wide structure (or NULL) that can be overridden by a system call such as jail. Or we could hang this stuff off of the jail structure or something like it. Sorry this is so rough. I've got to fly. -- Jacques Vidrine / n@nectar.com / nectar@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991018152147.609F71DA3>