Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Feb 1999 17:17:17 -0700
From:      Lyndon Nerenberg <lyndon@execmail.com>
To:        Nate Williams <nate@mt.sri.com>
Cc:        "Dan - Sr. Admin" <dm@globalserve.net>, freebsd-current@FreeBSD.ORG
Subject:   Re: paranoid patches
Message-ID:  <Pine.SGI.4.05.9902181715180.61630-100000@zappa.esys.ca>
In-Reply-To: <199902181949.MAA10630@mt.sri.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> > Basically, it is a patch into libkvm and w, that will allow a user (with
> > the exception to the super user, naturally) to only view processes or 
> > information belonging to him/herself.

> The only problem with this is setuid binaries.  The processes may have
> been started by me (top, etc..), but this wouldn't allow me to monitor
> the process once it's started.

And, anything that can read /dev/[k]mem is free to bypass libkvm and just
grovel around in the kernel memory space, anyway.

--lyndon



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SGI.4.05.9902181715180.61630-100000>