From owner-freebsd-current  Tue Dec  1 13:43:47 1998
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA20559
          for freebsd-current-outgoing; Tue, 1 Dec 1998 13:43:47 -0800 (PST)
          (envelope-from owner-freebsd-current@FreeBSD.ORG)
Received: from apollo.backplane.com (apollo.backplane.com [209.157.86.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA20554;
          Tue, 1 Dec 1998 13:43:45 -0800 (PST)
          (envelope-from dillon@apollo.backplane.com)
Received: (from dillon@localhost)
	by apollo.backplane.com (8.9.1/8.9.1) id NAA10640;
	Tue, 1 Dec 1998 13:43:33 -0800 (PST)
	(envelope-from dillon)
Date: Tue, 1 Dec 1998 13:43:33 -0800 (PST)
From: Matthew Dillon <dillon@apollo.backplane.com>
Message-Id: <199812012143.NAA10640@apollo.backplane.com>
To: freebsd-current@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject: Re: kmem, tty, bind security enhancements commit.
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

    I've committed the kmem, tty, and bind sandboxes.  This is inclusive
    of changing rc.conf to run bind in the sandbox which could be somewhat
    controversial but, I think, necessary.

    I accidently created a /usr/src/etc/namedb/s directory and cvs add'd
    it, then realized that it shouldn't be in the source tree (mtree handles
    creating it in production).  I've cvs deleted it but it will not commit
    the deletion to the server.  i.e. 'cvs commit' thinks there is nothing
    to do.  Very odd.  I'd appreciate it if a cvs god looked at that!

    Added bonus: comsat can also be run in the tty sandbox, and it is 
    enabled by default so that's good!

						Thanks,

						-Matt


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message