From owner-freebsd-bugs@FreeBSD.ORG  Tue Sep  2 17:40:04 2008
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 6F007106567D
	for <freebsd-bugs@hub.freebsd.org>;
	Tue,  2 Sep 2008 17:40:04 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id 4EDF78FC1B
	for <freebsd-bugs@hub.freebsd.org>;
	Tue,  2 Sep 2008 17:40:04 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m82He4oF072318
	for <freebsd-bugs@freefall.freebsd.org>; Tue, 2 Sep 2008 17:40:04 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m82He4pk072317;
	Tue, 2 Sep 2008 17:40:04 GMT (envelope-from gnats)
Resent-Date: Tue, 2 Sep 2008 17:40:04 GMT
Resent-Message-Id: <200809021740.m82He4pk072317@freefall.freebsd.org>
Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer)
Resent-To: freebsd-bugs@FreeBSD.org
Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org,
	Robert Faulds <frf@xocolatl.com>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 2827F1065674
	for <FreeBSD-gnats-submit@freebsd.org>;
	Tue,  2 Sep 2008 17:38:28 +0000 (UTC)
	(envelope-from frf@xocolatl.com)
Received: from sour.xocolatl.com (xocolatl.com [216.240.48.11])
	by mx1.freebsd.org (Postfix) with ESMTP id F1A678FC28
	for <FreeBSD-gnats-submit@freebsd.org>;
	Tue,  2 Sep 2008 17:38:27 +0000 (UTC)
	(envelope-from frf@xocolatl.com)
Received: from sour.xocolatl.com (localhost [127.0.0.1])
	by sour.xocolatl.com (8.14.2/8.14.2) with ESMTP id m82HHCnm098578
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
	for <FreeBSD-gnats-submit@freebsd.org>;
	Tue, 2 Sep 2008 10:17:12 -0700 (PDT)
	(envelope-from frf@sour.xocolatl.com)
Received: (from frf@localhost)
	by sour.xocolatl.com (8.14.2/8.14.2/Submit) id m82HHBcO098577;
	Tue, 2 Sep 2008 10:17:11 -0700 (PDT) (envelope-from frf)
Message-Id: <200809021717.m82HHBcO098577@sour.xocolatl.com>
Date: Tue, 2 Sep 2008 10:17:11 -0700 (PDT)
From: Robert Faulds <frf@xocolatl.com>
To: FreeBSD-gnats-submit@FreeBSD.org
X-Send-Pr-Version: 3.113
Cc: 
Subject: kern/127048: systat(1) information leak when
	security.bsd.see_other_uids=0
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Robert Faulds <frf@xocolatl.com>
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Sep 2008 17:40:04 -0000


>Number:         127048
>Category:       kern
>Synopsis:       systat(1) information leak when security.bsd.see_other_uids=0
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Sep 02 17:40:03 UTC 2008
>Closed-Date:
>Last-Modified:
>Originator:     Robert Faulds
>Release:        FreeBSD 7.0-STABLE i386
>Organization:
>Environment:
System: FreeBSD sour.xocolatl.com 7.0-STABLE FreeBSD 7.0-STABLE #29: Tue Aug 5 05:29:58 PDT 2008 root@sour.xocolatl.com:/usr/obj/usr/src/sys/SOUR i386


>Description:
	When security.bsd.see_other_uids=0, systat -net displays all
network connections.  Not just those of the UID running systat.
>How-To-Repeat:
Set security.bsd.see_other_uids=0
As non-root user, run systat -net and view all sockets. Compare this
with netstat as the same user.
>Fix:
Unknown.... Sorry.
>Release-Note:
>Audit-Trail:
>Unformatted: