From owner-freebsd-audit Fri Feb 2 9:45:54 2001 Delivered-To: freebsd-audit@freebsd.org Received: from mail.gmx.net (sproxy.gmx.net [194.221.183.20]) by hub.freebsd.org (Postfix) with SMTP id E0BA737B699 for ; Fri, 2 Feb 2001 09:45:34 -0800 (PST) Received: (qmail 25899 invoked by uid 0); 2 Feb 2001 17:44:50 -0000 Received: from p3e9c2f5a.dip.t-dialin.net (HELO forge.local) (62.156.47.90) by mail.gmx.net (mp001-rz3) with SMTP; 2 Feb 2001 17:44:50 -0000 Received: from thomas by forge.local with local (Exim 3.16 #1 (Debian)) id 14OkGK-0000l0-00; Fri, 02 Feb 2001 18:44:44 +0100 Date: Fri, 2 Feb 2001 18:44:44 +0100 From: Thomas Moestl To: Robert Watson Cc: freebsd-audit@freebsd.org Subject: Re: patch to remove setgid kmem from top Message-ID: <20010202184444.A2902@crow.dom2ip.de> Mail-Followup-To: Thomas Moestl , Robert Watson , freebsd-audit@freebsd.org References: <20010202015844.A1246@crow.dom2ip.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from rwatson@freebsd.org on Fri, Feb 02, 2001 at 12:04:44PM -0500 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, Feb 02, 2001 at 12:04:44PM -0500, Robert Watson wrote: > This is great -- I won't have a chance to look in detail at your patches > for a bit, but it seems that this is a great step forwards. I don't > suppose you want to now turn your interest to netstat, vmstat, iostat, > dmesg, nfsstat, pstat, and systat? :-) Much of the information needed in > many of these is already exported -- in my mind systat is the most > important as it links against ncurses and provides an interactive > interface. Also, systat is least likely to suffer from the "but it won't > work on a kernel dump" syndrome as it is generally not used for a post > mortem. Actually, I want to take care of the remaining setgid kmem programs. As you proposed, my next victim will probably be systat, as it has only 7 remaining kvm_read calls in two files (plus kvm_getswapinfo, which I had already patched for top to no longer need kmem access for live kernels). - thomas To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message