Date: Wed, 17 Oct 2001 17:19:01 +0100 From: Nik Clayton <nik@freebsd.org> To: Robert Watson <rwatson@FreeBSD.org> Cc: "Andrey A. Chernov" <ache@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc group master.passwd Message-ID: <20011017171901.C88453@clan.nothing-going-on.org> In-Reply-To: <Pine.NEB.3.96L.1011017100858.30170B-100000@fledge.watson.org>; from rwatson@FreeBSD.org on Wed, Oct 17, 2001 at 10:11:34AM -0400 References: <200110171321.f9HDLrP93078@freefall.freebsd.org> <Pine.NEB.3.96L.1011017100858.30170B-100000@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--GYkYyJI7bObpCn+O Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Oct 17, 2001 at 10:11:34AM -0400, Robert Watson wrote: > This is good to see -- the whole nobody:nobody thing has worried me for a > while, as it's used by a number of daemons to create a shared sandbox, and > a failure of one daemon can lead to the failure of all others, as well as > potential privilege escalation due to poor sandboxing techniques by any of > those daemons. Can we get all this documented somewhere? Is there a canonical list of what user names various ports expect and/or create? If not, we should have one (probably in the main Handbook, with a pointer to it in the Porter's Handbook). N --=20 FreeBSD: The Power to Serve http://www.freebsd.org/ FreeBSD Documentation Project http://www.freebsd.org/docproj/ --- 15B8 3FFC DDB4 34B0 AA5F 94B7 93A8 0764 2C37 E375 --- --GYkYyJI7bObpCn+O Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjvNr3UACgkQk6gHZCw343WnpgCfel6PN2UNSEGnkKeTq/BrjoPU poEAnR6+bDD0To1aBSl75o45BcR8lDwu =Ior3 -----END PGP SIGNATURE----- --GYkYyJI7bObpCn+O-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011017171901.C88453>