From owner-freebsd-security@FreeBSD.ORG  Thu Dec 29 18:26:18 2011
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 885AE1065678;
	Thu, 29 Dec 2011 18:26:18 +0000 (UTC)
	(envelope-from delphij@delphij.net)
Received: from anubis.delphij.net (anubis.delphij.net
	[IPv6:2001:470:1:117::25])
	by mx1.freebsd.org (Postfix) with ESMTP id 67CA78FC16;
	Thu, 29 Dec 2011 18:26:18 +0000 (UTC)
Received: from delta.delphij.net (drawbridge.ixsystems.com [206.40.55.65])
	(using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
	(No client certificate requested)
	by anubis.delphij.net (Postfix) with ESMTPSA id 208FD17992;
	Thu, 29 Dec 2011 10:26:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=delphij.net; s=anubis;
	t=1325183178; bh=s50/U7kLokNcTLcY2YNnFgLw8P2AzUB8rYrJSQ9ftDk=;
	h=Message-ID:Date:From:Reply-To:MIME-Version:To:CC:Subject:
	References:In-Reply-To:Content-Type:Content-Transfer-Encoding;
	b=Y2pymTGyxvKgcl5FWQsSOGfzWR4RxLyqRxOahGggCWQKvw20Lj+9gI4mhKnZBxyKO
	i/HxH3RxGsaXosSSxnnrGCEOuAVNNNcZVROI6u2hZEQTcMmqhHNo/mKuK11iZ/BO1e
	dPI7qzCSrYY3jytxXWjYsfTJ/TjGoRdABbgXaHp4=
Message-ID: <4EFCB0C9.6090608@delphij.net>
Date: Thu, 29 Dec 2011 10:26:17 -0800
From: Xin Li <delphij@delphij.net>
Organization: The FreeBSD Project
MIME-Version: 1.0
To: John Baldwin <jhb@freebsd.org>
References: <201112231500.pBNF0c0O071712@svn.freebsd.org>
	<4EF6444F.6090708@FreeBSD.org>
	<CAGMYy3uzLXMvw40q1hM9dnHGxxh+eO_8Y1nbNKsPSB_Aenmm7w@mail.gmail.com>
	<201112290939.53665.jhb@freebsd.org>
In-Reply-To: <201112290939.53665.jhb@freebsd.org>
X-Enigmail-Version: undefined
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Cc: freebsd-security@freebsd.org, Doug Barton <dougb@freebsd.org>,
	d@delphij.net
Subject: Re: svn commit: r228843 - head/contrib/telnet/libtelnet
 head/crypto/heimdal/appl/telnet/libtelnet
 head/include head/lib/libc/gen head/lib/libc/iconv head/lib/libc/include
 head/lib/libc/net head/libexec...
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: d@delphij.net
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 Dec 2011 18:26:18 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 12/29/11 06:39, John Baldwin wrote:
> Can you give some more details on why ftpd is triggering a dlopen
> inside of the chroot?  It would appear that that is unrelated to
> helper programs (since setting a flag in libc in ftpd can't
> possibly affect helper programs ability to use dlopen() from within
> libc).

Sure.  That's because nsdispatch(3) would reload /etc/nsswitch.conf if
it notices a change.  After chroot() the file is considered as
"chang"ed and thus it reloads the file as well as designated shared
libraries.

Cheers,
- -- 
Xin LI <delphij@delphij.net>	https://www.delphij.net/
FreeBSD - The Power to Serve!		Live free or die
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk78sMkACgkQOfuToMruuMAu9wCbBevDzZFX9eHBYHtN1iOw9iG2
Z2oAnjYrxskRMyu0ygqesoi7UgrjumWv
=N7gZ
-----END PGP SIGNATURE-----