From owner-freebsd-security@FreeBSD.ORG  Sat Aug  9 06:20:55 2008
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@FreeBSD.ORG
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 78B7F106564A;
	Sat,  9 Aug 2008 06:20:55 +0000 (UTC)
	(envelope-from thompsa@FreeBSD.org)
Received: from pele.citylink.co.nz (pele.citylink.co.nz [202.8.44.226])
	by mx1.freebsd.org (Postfix) with ESMTP id 351578FC0C;
	Sat,  9 Aug 2008 06:20:55 +0000 (UTC)
	(envelope-from thompsa@FreeBSD.org)
Received: from localhost (localhost [127.0.0.1])
	by pele.citylink.co.nz (Postfix) with ESMTP id DF5202BD3A;
	Sat,  9 Aug 2008 18:20:53 +1200 (NZST)
X-Virus-Scanned: Debian amavisd-new at citylink.co.nz
Received: from pele.citylink.co.nz ([127.0.0.1])
	by localhost (pele.citylink.co.nz [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id yqqownbsQiLY; Sat,  9 Aug 2008 18:20:50 +1200 (NZST)
Received: from citylink.fud.org.nz (unknown [202.8.44.45])
	by pele.citylink.co.nz (Postfix) with ESMTP;
	Sat,  9 Aug 2008 18:20:50 +1200 (NZST)
Received: by citylink.fud.org.nz (Postfix, from userid 1001)
	id 8ECBB1142A; Sat,  9 Aug 2008 18:20:49 +1200 (NZST)
Date: Fri, 8 Aug 2008 23:20:49 -0700
From: Andrew Thompson <thompsa@FreeBSD.org>
To: Marian Hettwer <mh@kernel32.de>
Message-ID: <20080809062049.GC95107@citylink.fud.org.nz>
References: <200808081318.m78DIaXJ017555@lurza.secnetix.de>
	<293d3dc9ebaee1119424aa58532d3c5d@localhost>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <293d3dc9ebaee1119424aa58532d3c5d@localhost>
User-Agent: Mutt/1.5.17 (2007-11-01)
X-Mailman-Approved-At: Sat, 09 Aug 2008 13:30:38 +0000
Cc: freebsd-security@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG
Subject: Re: should looking at an interface with 'ifconfig' trigger
	a?change ?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 09 Aug 2008 06:20:55 -0000

On Fri, Aug 08, 2008 at 04:00:56PM +0200, Marian Hettwer wrote:
> Hi Oliver,
> 
> On Fri, 8 Aug 2008 15:18:36 +0200 (CEST), Oliver Fromme
> > 
> > Shouldn't that be considered a security flaw?  After all,
> > you can perform "ifconfig $IF" inside a jail to list the
> > interface configuration, but you're not allowed to make
> > any changes.
> > 
> > Given your description above, it means that it is possible
> > to modify the interface configuration (cause a failover)
> > from within a jail.  That's not good.  I think that needs
> > to be fixed, or at the very least it needs to be properly
> > documented.
> > 
> And regarding documentation. It should be documented, that lagg(4) won't
> work very well with bce(4). If it's nowhere documented that bce and
> failover with lagg doesn't work, some people might be screwed...

I guess so although bce will not be the only one. Also spanning tree,
carp and dhclient use link state events too, possibly others.


Andrew