From owner-freebsd-arch@FreeBSD.ORG Mon Aug 25 06:27:06 2008 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 978BE1065677 for ; Mon, 25 Aug 2008 06:27:06 +0000 (UTC) (envelope-from dillon@apollo.backplane.com) Received: from apollo.backplane.com (apollo.backplane.com [216.240.41.2]) by mx1.freebsd.org (Postfix) with ESMTP id 847F68FC39 for ; Mon, 25 Aug 2008 06:27:06 +0000 (UTC) (envelope-from dillon@apollo.backplane.com) Received: from apollo.backplane.com (localhost [127.0.0.1]) by apollo.backplane.com (8.14.1/8.14.1) with ESMTP id m7P6Gw7I055071 for ; Sun, 24 Aug 2008 23:16:58 -0700 (PDT) Received: (from dillon@localhost) by apollo.backplane.com (8.14.1/8.13.4/Submit) id m7P6GwEa055070; Sun, 24 Aug 2008 23:16:58 -0700 (PDT) Date: Sun, 24 Aug 2008 23:16:58 -0700 (PDT) From: Matthew Dillon Message-Id: <200808250616.m7P6GwEa055070@apollo.backplane.com> To: freebsd-arch@freebsd.org References: <20080822150020.GA57443@lor.one-eyed-alien.net> <9bbcef730808220802pa84b597u457100a23b03a80c@mail.gmail.com> <20080822153945.GC57443@lor.one-eyed-alien.net> <9bbcef730808220853q22666b44n5ca2b7add991191f@mail.gmail.com> <48B23A0E.1030700@yandex.ru> Subject: Re: Magic symlinks redux X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 25 Aug 2008 06:27:06 -0000 The only issue we hit with per-process varsyms is that to really be useful the shells need built-ins to set the process-space variables, since doing so as an exec'd subprocess will not effect the shell or its children. We have no plans to allow one process to modify another process's varsyms as that would cause significant security issues. In fact, even the per-user variables might have security issues (e.g. common-run 'nobody' user utilities, and so forth, for which a pseudo-userid has not been created). I'm kinda thinking of removing per-user variables despite the usefulness. There have been various circumstances where we've thought varsyms would be useful, but ended up not needing to use them. Right now we are looking at possibly using them to point /usr/lib and friends to select 32 or 64 bit ABI library paths, and have the kernel automatically set a varsym when exec'ing an ELF program to the program's ABI. Doing this would allow 32 and 64 bit program, library, and package sets to be run and maintained side-by-side. -Matt