From owner-freebsd-current@FreeBSD.ORG Fri Oct 8 08:49:20 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 15F0816A4CE for ; Fri, 8 Oct 2004 08:49:20 +0000 (GMT) Received: from smtp.des.no (flood.des.no [217.116.83.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id 728C743D2F for ; Fri, 8 Oct 2004 08:49:19 +0000 (GMT) (envelope-from des@des.no) Received: by smtp.des.no (Pony Express, from userid 666) id F37D25310; Fri, 8 Oct 2004 10:49:17 +0200 (CEST) Received: from dwp.des.no (des.no [80.203.228.37]) by smtp.des.no (Pony Express) with ESMTP id 3C359530A; Fri, 8 Oct 2004 10:49:11 +0200 (CEST) Received: by dwp.des.no (Postfix, from userid 2602) id 0187DB85E; Fri, 8 Oct 2004 10:49:10 +0200 (CEST) To: Christopher Nehren References: <200410061755.42069.kirk@strauser.com> <1097105028.775.22.camel@prophecy.dyndns.org> From: des@des.no (=?iso-8859-1?q?Dag-Erling_Sm=F8rgrav?=) Date: Fri, 08 Oct 2004 10:49:10 +0200 In-Reply-To: <1097105028.775.22.camel@prophecy.dyndns.org> (Christopher Nehren's message of "Wed, 06 Oct 2004 19:23:48 -0400") Message-ID: User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on flood.des.no X-Spam-Level: X-Spam-Status: No, hits=0.0 required=5.0 tests=AWL autolearn=no version=2.64 cc: Kirk Strauser cc: current@freebsd.org Subject: Re: Weird errors with gtar on 5.3-BETA7 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Oct 2004 08:49:20 -0000 Christopher Nehren writes: > You don't happen to be using procfs on a 5.x system, do you? procfs is > notoriously insecure (and, in my opinion, its very functionality is > insecure -- you shouldn't be able to see anything about anyone else's > processes. Period.). If you are certain that procfs in 5.x contains actual security holes, you should file a PR so I can fix them. If not, please stop spreading FUD. DES --=20 Dag-Erling Sm=F8rgrav - des@des.no