From owner-cvs-all Mon Feb 12 20:34:35 2001 Delivered-To: cvs-all@freebsd.org Received: from mobile.wemm.org (c1315225-a.plstn1.sfba.home.com [65.0.135.147]) by hub.freebsd.org (Postfix) with ESMTP id 14BB037B4EC; Mon, 12 Feb 2001 20:34:23 -0800 (PST) Received: from netplex.com.au (localhost [127.0.0.1]) by mobile.wemm.org (8.11.1/8.11.1) with ESMTP id f1D4XnU58135; Mon, 12 Feb 2001 20:33:50 -0800 (PST) (envelope-from peter@netplex.com.au) Message-Id: <200102130433.f1D4XnU58135@mobile.wemm.org> X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 To: Matt Dillon Cc: Warner Losh , Robert Watson , Peter Pentchev , Dag-Erling Smorgrav , cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG Subject: Re: cvs commit: src/sys/vm vm_zone.c vm_zone.h In-Reply-To: <200102121823.f1CINTB07769@earth.backplane.com> Date: Mon, 12 Feb 2001 20:33:49 -0800 From: Peter Wemm Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Matt Dillon wrote: > :Warner Losh wrote: > :> In message Rob > : ert Watson writes: > :> : appreciated. (this will also make it easier for portable kernel > :> : monitoring tools to be written, and allow graphical monitoring tools to > :> : run with less privilege). > :> > :> And generally make for a happier security officer team :-) > : > :And an unhappier team of people dealing with kernel crashdumps. :-( > : > :All this sysctl stuff is fine, but dont kill the crashdump reading code! > :If -M or -N are specified then use the old way (and require root to be > :running it). Without -M or -N, use sysctl. > : > :Cheers, > :-Peter > > You don't need root to use -M and -N, you only need to be able to > access the dump files. Sorry for not being specific about it. I didn't mean to check for uid == root, I meant just rely on the user's existing privs to read the files. But one had better hope that the dump files are only root accessible - imagine all the priviliged info that could be in there... (master.passwd, spwd.db, ssh-agent in-memory decoded private keys, etc) Cheers, -Peter -- Peter Wemm - peter@FreeBSD.org; peter@yahoo-inc.com; peter@netplex.com.au "All of this is for nothing if we don't go to the stars" - JMS/B5 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message