Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Jun 2013 14:12:39 +0100
From:      David Chisnall <theraven@FreeBSD.org>
To:        Ambarisha B <b.ambarisha@gmail.com>
Cc:        soc-status@FreeBSD.org
Subject:   Re: IDMS : Weekly status report #1 of 14
Message-ID:  <00D9C707-D223-44D3-B57F-2FFB0CD028A6@FreeBSD.org>
In-Reply-To: <CAJP25sPc3%2B-EG8CFsrsHQf5=6JRyioMoABt213sccWbEiTwO=g@mail.gmail.com>
References:  <CAJP25sPc3%2B-EG8CFsrsHQf5=6JRyioMoABt213sccWbEiTwO=g@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi Ambrarish,

The fetch utility has been the case study for a lot of the =
compartmentalisation work on Capsicum so far.  Have you considered how =
the download manager will handle exploitable bugs in, for example, the =
HTTP header parsing in libfetch?  I note that your plan is to use a =
thread, rather than a forked process, for each request, which means that =
it can not run in sandboxed mode. =20

What privilege do you imagine the daemon running with?  One of the =
problems with fetch currently is that it is often invoked as root when =
downloading ports distfiles and so runs with ambient privilege of the =
root user.

David

On 27 Jun 2013, at 13:55, Ambarisha B <b.ambarisha@gmail.com> wrote:

> Hi,
>=20
> I'll working on Intelligent download manager service (dms) for the =
ports
> collection this summer.
>=20
> This week I've worked on dmclient which will be a replacement to the
> "fetch" program. I took the code of fetch(1) and replaced all the =
calls
> into libfetch with my own dm* calls which request the DM service to =
fetch
> the file instead of fetching the files independently. This week I'll =
finish
> the basic DM server and will be able to test the client against it.
>=20
> My tentative schedule is on the project wiki page at :
> https://wiki.freebsd.org/SummerOfCode2013/IntellegentDownloadManager
>=20
> Cheers
> Ambarish
> _______________________________________________
> soc-status@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/soc-status
> To unsubscribe, send any mail to "soc-status-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00D9C707-D223-44D3-B57F-2FFB0CD028A6>