From owner-freebsd-hackers Wed Jun 7 11:24:14 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from peach.ocn.ne.jp (peach.ocn.ne.jp [210.145.254.87]) by hub.freebsd.org (Postfix) with ESMTP id 2874D37B915; Wed, 7 Jun 2000 11:24:10 -0700 (PDT) (envelope-from dcs@newsguy.com) Received: from newsguy.com (p21-dn03kiryunisiki.gunma.ocn.ne.jp [210.232.224.150]) by peach.ocn.ne.jp (8.9.1a/OCN/) with ESMTP id DAA13465; Thu, 8 Jun 2000 03:24:06 +0900 (JST) Message-ID: <393E9389.EB7C0F3F@newsguy.com> Date: Thu, 08 Jun 2000 03:25:13 +0900 From: "Daniel C. Sobral" X-Mailer: Mozilla 4.7 [en] (Win98; I) X-Accept-Language: en,pt-BR,ja MIME-Version: 1.0 To: Robert Watson Cc: Matthew Dillon , Bjoern Fischer , hackers@FreeBSD.ORG Subject: Re: kerneld for FreeBSD References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Robert Watson wrote: > > I tend to agree, on face value, with an intuitive objection to kerneld. > That said, it should be observed that a "kerneld" would restrict the code > sufficiently privileged to cause a module load in one binary, as opposed > to a model where that type of privilege has to be provided to hundreds of > them (even huge beasts like ppp). If requests for kernel functionality > loads come through a well-audited (both senses) and well-defined LPC > mechanism, there is substantially less risk involved. In a world where > dynamic kernel module loading occurs even after entering secure, > multi-level operation, that type of protection seems like a good idea. It > would allow us to distinguish the following privileges: > > 1 Right to request specific functionality be loaded > 2 Right to load the functionality > 3 Right to invoke the functionality > > Letting, say, ppp have (1) and (3) but not (2) provides a substantial > security improvement, while retaining the ability to introduce new > functionality at run-time. Wow, for the first time someone makes a *GOOD* case for kerneld! -- Daniel C. Sobral (8-DCS) dcs@newsguy.com dcs@freebsd.org capo@yet.another.bsdconspiracy.org Hmmm - I have to go check this. My reality assumptions are shattered. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message