From owner-cvs-all@FreeBSD.ORG Mon Sep 19 09:14:48 2005 Return-Path: X-Original-To: cvs-all@freebsd.org Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 75ACD16A41F; Mon, 19 Sep 2005 09:14:48 +0000 (GMT) (envelope-from tataz@tataz.chchile.org) Received: from smtp1-g19.free.fr (smtp1-g19.free.fr [212.27.42.27]) by mx1.FreeBSD.org (Postfix) with ESMTP id 180E743D49; Mon, 19 Sep 2005 09:14:47 +0000 (GMT) (envelope-from tataz@tataz.chchile.org) Received: from tatooine.tataz.chchile.org (vol75-8-82-233-239-98.fbx.proxad.net [82.233.239.98]) by smtp1-g19.free.fr (Postfix) with ESMTP id AC67610655; Mon, 19 Sep 2005 11:14:46 +0200 (CEST) Received: by tatooine.tataz.chchile.org (Postfix, from userid 1000) id 8AA54405C; Mon, 19 Sep 2005 11:14:47 +0200 (CEST) Date: Mon, 19 Sep 2005 11:14:47 +0200 From: Jeremie Le Hen To: Stefan Bethke Message-ID: <20050919091447.GL51142@obiwan.tataz.chchile.org> References: <200509161119.j8GBJcS0080866@repoman.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.9i Cc: cvs-src@freebsd.org, src-committers@freebsd.org, Pawel Jakub Dawidek , cvs-all@freebsd.org Subject: Re: cvs commit: src/lib/libutil pidfile.3 X-BeenThere: cvs-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the entire tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Sep 2005 09:14:48 -0000 Hi, > >pjd 2005-09-16 11:19:38 UTC > > > > FreeBSD src repository > > > > Modified files: > > lib/libutil pidfile.3 > > Log: > > Pidfiles should be created with permission preventing users from > >opening > > them for reading. When user can open file for reading, he can also > > flock(2) it, which can lead to confusions. > > This means that a monitoring tool would need to run with elevated > privileges to determine the PID of the process to monitor, correct? I can't see what's the problem with disclosing daemons' PID to all users, given they won't be able to signal it or such anyway. Regards, -- Jeremie Le Hen < jeremie at le-hen dot org >< ttz at chchile dot org >