From owner-freebsd-arch Mon Oct 18 8:22: 5 1999 Delivered-To: freebsd-arch@freebsd.org Received: from ns1.yes.no (ns1.yes.no [195.204.136.10]) by hub.freebsd.org (Postfix) with ESMTP id 36A9D14BF9 for ; Mon, 18 Oct 1999 08:22:00 -0700 (PDT) (envelope-from eivind@bitbox.follo.net) Received: from bitbox.follo.net (bitbox.follo.net [195.204.143.218]) by ns1.yes.no (8.9.3/8.9.3) with ESMTP id RAA24093 for ; Mon, 18 Oct 1999 17:21:59 +0200 (CEST) Received: (from eivind@localhost) by bitbox.follo.net (8.8.8/8.8.6) id RAA78024 for freebsd-arch@freebsd.org; Mon, 18 Oct 1999 17:21:58 +0200 (MET DST) Received: from gw.nectar.com (gw.nectar.com [209.98.143.44]) by hub.freebsd.org (Postfix) with ESMTP id C940814BF9 for ; Mon, 18 Oct 1999 08:21:49 -0700 (PDT) (envelope-from nectar@nectar.com) Received: from bone.nectar.com (bone.nectar.com [10.0.0.105]) by gw.nectar.com (Postfix) with ESMTP id 8E281C008; Mon, 18 Oct 1999 10:21:43 -0500 (CDT) Received: from bone.nectar.com (localhost [127.0.0.1]) by bone.nectar.com (Postfix) with ESMTP id 609F71DA3; Mon, 18 Oct 1999 10:21:47 -0500 (CDT) X-Mailer: exmh version 2.1.0 09/18/1999 X-PGP-RSAfprint: 00 F9 E6 A2 C5 4D 0A 76 26 8B 8B 57 73 D0 DE EE X-PGP-RSAkey: http://www.nectar.com/nectar-rsa.txt X-PGP-DSSfprint: AB2F 8D71 A4F4 467D 352E 8A41 5D79 22E4 71A2 8C73 X-PGP-DHfprint: 2D50 12E5 AB38 60BA AF4B 0778 7242 4460 1C32 F6B1 X-PGP-DH-DSSkey: http://www.nectar.com/nectar-dh-dss.txt From: Jacques Vidrine To: Dag-Erling Smorgrav Cc: freebsd-arch@freebsd.org In-reply-to: References: <14343.23571.679909.243732@blm30.IRO.UMontreal.CA> <19991017012750.A812@fever.semiotek.com> <380A1E2C.CCA326F5@gorean.org> <19991018024704.A512@semiotek.com> <19991018043039.B1711@semiotek.com> <19991018142633.D1DDB1DA3@bone.nectar.com> Subject: Re: kern.securelevel and X Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 18 Oct 1999 10:21:47 -0500 Message-Id: <19991018152147.609F71DA3@bone.nectar.com> Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 18 October 1999 at 16:49, Dag-Erling Smorgrav wrote: > With all due respect, *yuck* :) Well I expected gagging, but I thought there might be some details :-) > What EE suggested was to define a new SYSCTL macro to make defining > new security sysctls trivial. You'd do something like this: [snip] That's fine for system-wide stuff, but I'd like to see the ability to tweak this same stuff per-process. I see a system-wide data structure to hold this type of configuration information. Each process should also have a pointer to the system-wide structure (or NULL) that can be overridden by a system call such as jail. Or we could hang this stuff off of the jail structure or something like it. Sorry this is so rough. I've got to fly. -- Jacques Vidrine / n@nectar.com / nectar@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message