From owner-freebsd-current@FreeBSD.ORG Mon Jun 21 16:17:30 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8074916A4CE for ; Mon, 21 Jun 2004 16:17:30 +0000 (GMT) Received: from sirius.firepipe.net (sirius.firepipe.net [69.13.116.1]) by mx1.FreeBSD.org (Postfix) with ESMTP id 50A3443D45 for ; Mon, 21 Jun 2004 16:17:30 +0000 (GMT) (envelope-from will@csociety.org) Received: by sirius.firepipe.net (Postfix, from userid 1000) id E26461800D; Mon, 21 Jun 2004 11:17:29 -0500 (EST) Date: Mon, 21 Jun 2004 11:17:29 -0500 From: Will Andrews To: Max Laier Message-ID: <20040621161729.GL7956@sirius.firepipe.net> Mail-Followup-To: Max Laier , freebsd-current@freebsd.org References: <20040620134437.P94503@fw.reifenberger.com> <20040620230350.O1720@fw.reifenberger.com> <20040621105114.G9108@fw.reifenberger.com> <200406211639.22243.max@love2party.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="k9xkV0rc9XGsukaG" Content-Disposition: inline In-Reply-To: <200406211639.22243.max@love2party.net> User-Agent: Mutt/1.5.6i X-Mailman-Approved-At: Tue, 22 Jun 2004 12:02:33 +0000 cc: freebsd-current@freebsd.org Subject: Re: startup error for pflogd X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jun 2004 16:17:30 -0000 --k9xkV0rc9XGsukaG Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jun 21, 2004 at 04:39:10PM +0200, Max Laier wrote: > I'll try to explain the reasoning behind this. If there are a zillion=20 > processes all owned by nobody:nogroup and an attacker manages to obtain= =20 > control over one of them, the rest might be easy/easier prey. The evildoe= r=20 > will have better chances to obtain critical resources and maybe root in t= he=20 > end. I think this is a good approach. In fact, that's what I do on my public mirror servers, i.e. allocate dedicated users for specific tasks to eliminate privilege escalation through them. Regards, --=20 wca --k9xkV0rc9XGsukaG Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFA1woZF47idPgWcsURAlHZAJ43a1IHDyFguIE1LTcGAHYcEZqIZwCdGkXu 5+aLcb60yudQXWvyvFBcYYo= =52T1 -----END PGP SIGNATURE----- --k9xkV0rc9XGsukaG--