From owner-freebsd-security@FreeBSD.ORG Fri Sep 14 23:36:59 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 4F2701065673; Fri, 14 Sep 2012 23:36:59 +0000 (UTC) (envelope-from rwmaillists@googlemail.com) Received: from mail-wg0-f50.google.com (mail-wg0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id E60208FC0A; Fri, 14 Sep 2012 23:36:57 +0000 (UTC) Received: by wgbds11 with SMTP id ds11so3549186wgb.31 for ; Fri, 14 Sep 2012 16:36:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=date:from:to:cc:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type:content-transfer-encoding; bh=flV6QFBslX1Ywv6PsQocqSp9kn2Ge57+L+IZKkAhWO0=; b=tAcpgfOGFDE6+7iykm8fcIzbbRes+RPZUTv8Kkhy/DNsVUSfBUzfP9SbTyN3u6O7Eb pfOpnqLPIMrMwoORwjpxuoCX1oQgZLmvTbBe1IA4bgL1EuzVe5FBqlKit5rl/tm8NyS+ YJw/8CPeIw1Zc4hlOGnqTsm9xqaBHO2+XqN5lfq2FFOTmXcccdYN53lGqayqIy4hp9Ks Ns037ERcH698D5oqHRO166jawtlE1TVtKu0IWvgC5rcMnQL03aoEpWNkVWTo19G9mOBs /hfYix3OyBT/n9nfRxEnbQI507dccXgAWnIlpRSl4MI0qckAwKt0GPUz+djW3A+EGSP5 65PA== Received: by 10.180.24.197 with SMTP id w5mr1153465wif.22.1347665811105; Fri, 14 Sep 2012 16:36:51 -0700 (PDT) Received: from gumby.homeunix.com (87-194-105-247.bethere.co.uk. [87.194.105.247]) by mx.google.com with ESMTPS id bc2sm2138492wib.0.2012.09.14.16.36.47 (version=SSLv3 cipher=OTHER); Fri, 14 Sep 2012 16:36:50 -0700 (PDT) Date: Sat, 15 Sep 2012 00:36:46 +0100 From: RW To: Arthur Mesh Message-ID: <20120915003646.623436ea@gumby.homeunix.com> In-Reply-To: <20120914231503.GP14077@x96.org> References: <20120914231503.GP14077@x96.org> X-Mailer: Claws Mail 3.8.1 (GTK+ 2.24.6; amd64-portbld-freebsd8.3) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Sat, 15 Sep 2012 01:45:50 +0000 Cc: Ian Lepore , Doug Barton , Ben Laurie , Mark, freebsd-security@freebsd.org, "Bjoern A. Zeeb" , Mark Murray , Murray Subject: Re: svn commit: r239569 - head/etc/rc.d X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Sep 2012 23:36:59 -0000 On Fri, 14 Sep 2012 16:15:03 -0700 Arthur Mesh wrote: > Has it been considered that /dev/random being "rw-rw-rw-" may be a bad > idea? What's the benefit of allowing unprivileged users reseeding > yarrow? Perhaps restricting it to "rw-r--r--" is a part of the > solution that may address potential system overwhelm by unprivileged > users? As currently implemented it's completely harmless.