From owner-svn-src-all@FreeBSD.ORG Sat Dec 24 10:26:22 2011 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1FED2106564A; Sat, 24 Dec 2011 10:26:22 +0000 (UTC) (envelope-from delphij@gmail.com) Received: from mail-tul01m020-f182.google.com (mail-tul01m020-f182.google.com [209.85.214.182]) by mx1.freebsd.org (Postfix) with ESMTP id 8E3178FC14; Sat, 24 Dec 2011 10:26:21 +0000 (UTC) Received: by obbwd18 with SMTP id wd18so8579298obb.13 for ; Sat, 24 Dec 2011 02:26:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=l946+VGatfYs/P3su/dL9Kf42tTifpb2QcHN2dqRVco=; b=nSmok7TUYk6O0koIVyjxQCaHm05q80jyoImR9IOuWsby3bJ5bOyEjm3ZduzITuMpyY puH2z11M+XAB8XKjITMLYayHREaotItlbAEzEtC2RyP/ghETXspTGi1dV1DfD0v5PGeg yLi3fILVRzsOGBdQgMAy0lgeUhnd5SAA3mpW8= MIME-Version: 1.0 Received: by 10.182.160.1 with SMTP id xg1mr15718074obb.30.1324722380934; Sat, 24 Dec 2011 02:26:20 -0800 (PST) Received: by 10.182.67.163 with HTTP; Sat, 24 Dec 2011 02:26:20 -0800 (PST) In-Reply-To: <20111224100509.GA98136@vniz.net> References: <201112231500.pBNF0c0O071712@svn.freebsd.org> <201112231058.46642.jhb@freebsd.org> <201112231122.34436.jhb@freebsd.org> <20111223120644.75fe944d@kan.dyndns.org> <20111223175143.GJ50300@deviant.kiev.zoral.com.ua> <20111224100509.GA98136@vniz.net> Date: Sat, 24 Dec 2011 02:26:20 -0800 Message-ID: From: Xin LI To: Andrey Chernov , Kostik Belousov , Alexander Kabaev , John Baldwin , Colin Percival , src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Content-Type: text/plain; charset=UTF-8 Cc: Subject: Re: svn commit: r228843 - head/contrib/telnet/libtelnet head/crypto/heimdal/appl/telnet/libtelnet head/include head/lib/libc/gen head/lib/libc/iconv head/lib/libc/include head/lib/libc/net head/libexec... X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Dec 2011 10:26:22 -0000 On Sat, Dec 24, 2011 at 2:05 AM, Andrey Chernov wrote: > On Fri, Dec 23, 2011 at 07:51:43PM +0200, Kostik Belousov wrote: >> The __FreeBSD_libc_enter_restricted_mode() is, and its name is ugly >> exactly to note the ugly intent. I do not see how the symbol can go > > There must be no ugly intents and names. This whole idea just proves yet > one our @secteam ugliness. > > There must be ischroot(2) the same way we already have issetugid(2). chroot(2) can create legitimate and secure environment where dlopen(2) is safe and necessary. Cheers, -- Xin LI https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die