Date: Fri, 18 May 2001 02:57:27 -0700 From: Kris Kennaway <kris@obsecurity.org> To: Peter Wemm <peter@wemm.org> Cc: Alfred Perlstein <bright@rush.net>, Dima Dorfman <dima@unixfreak.org>, hackers@FreeBSD.ORG, tmm@FreeBSD.org Subject: Re: De-setgid-ifying ipcs(1) Message-ID: <20010518025727.A98864@xor.obsecurity.org> In-Reply-To: <20010518081635.F366B380A@overcee.netplex.com.au>; from peter@wemm.org on Fri, May 18, 2001 at 01:16:35AM -0700 References: <20010518014032.N7118@superconductor.rush.net> <20010518081635.F366B380A@overcee.netplex.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Fri, May 18, 2001 at 01:16:35AM -0700, Peter Wemm wrote: > Alfred Perlstein wrote: > > * Dima Dorfman <dima@unixfreak.org> [010518 01:05] wrote: > > > Hi folks, > > > > > > ipcs(1) is currently installed as setgid kmem. This isn't good for > > > obvious reasons. Moreover, the information it needs is easily > > > exported via sysctl. Below is a patch which adds the necessary sysctl > > > oids and changes ipcs(1) to use them. > [..] > > I'm glad you kept kmem backwards compatibility, as this is required > > for post mortem analysis of crashdumps. > > Yes. Thanks! (and the same from me about the !use_sysctls thing) > > Does anybody feel like fixing netstat(1) while we're at it? Thomas Moestl has patches for most of the setgid kmem applications - they were posted to -arch a while back, but didn't get all that much review. See http://people.FreeBSD.org/~tmm/ for the patches. Kris [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.5 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE7BPIHWry0BWjoQKURAo4dAJ9w/lhvCUKrAyqML839BCFRVIwALACgwRXP HHOVShhueoCX/BGDju+1vG0= =SUCe -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010518025727.A98864>