Date: Mon, 21 Dec 1998 16:35:32 +0100 From: Eivind Eklund <eivind@yes.no> To: Dag-Erling Smorgrav <des@flood.ping.uio.no> Cc: Matt Dillon <dillon@FreeBSD.ORG>, security@FreeBSD.ORG Subject: Re: cvs commit: src/etc rc.conf Message-ID: <19981221163532.G14124@follo.net> In-Reply-To: <xzpyao1ecvf.fsf@flood.ping.uio.no>; from Dag-Erling Smorgrav on Mon, Dec 21, 1998 at 04:25:08PM %2B0100 References: <199812190725.XAA05479@freefall.freebsd.org> <xzp67b5ft9e.fsf@flood.ping.uio.no> <19981221161110.E14124@follo.net> <xzpyao1ecvf.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Dec 21, 1998 at 04:25:08PM +0100, Dag-Erling Smorgrav wrote: > Eivind Eklund <eivind@yes.no> writes: > > ... unless you do a series of small modifications. It is not as if > > rescanning the interfaces is a _large_ task, or one that couldn't be > > done by a forked out half of named > > Umm, the problem isn't scanning interfaces, the problem is binding to > them, which needs to be done by the parent, so you can't delegate > interface rescanning to a child process. Or rather, you can, but it > won't matter since at some point the child will need to communicate > its results to the parent which will then attempt to bind to port 53 > on interfaces it's not yet bound to, for which it needs privs. You don't need to have the parent bind the interface. You use the capability transfer support in BSD - you pass an fd over a local socket, using SCM_RIGHTS. This is described in the Stevens book, which is presently occupying the space between your monitor and lamp (on the right side of the monitor). The implementation of this mechanism is in sys/kern/uipc_socket.c, sys/kern/uipc_syscalls.c, and sys/kern/uipc_usrreq.c. Eivind. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19981221163532.G14124>