Date: Wed, 16 Jan 2002 01:09:37 -0800 From: "Crist J . Clark" <cristjc@earthlink.net> To: Sheldon Hearn <sheldonh@starjuice.net> Cc: FreeBSD@jovi.net, freebsd-questions@FreeBSD.ORG, freebsd-arch@FreeBSD.ORG, bug-followup@FreeBSD.ORG Subject: Re: kern/33904: secure mode bug Message-ID: <20020116010937.K31328@blossom.cjclark.org> In-Reply-To: <98823.1011171388@axl.seasidesoftware.co.za>; from sheldonh@starjuice.net on Wed, Jan 16, 2002 at 10:56:28AM %2B0200 References: <20020115210303.E31328@blossom.cjclark.org> <98823.1011171388@axl.seasidesoftware.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Jan 16, 2002 at 10:56:28AM +0200, Sheldon Hearn wrote:
>
>
> On Tue, 15 Jan 2002 21:03:03 PST, "Crist J . Clark" wrote:
>
> > On Tue, Jan 15, 2002 at 03:03:42PM -0500, FreeBSD@jovi.net wrote:
> > > It would help to document or fix date/ntpdate/ntpd/...
> >
> > ntpdate(8) and ntpd(8) are contributed software. As far as I can tell,
> > FreeBSD uses "virgin" imports. There is no local customization of the
> > code. Maintaining local modifications to code maintained by outside
> > vendors is expensive and therefore needs a lot of justification.
>
> And that's not the point. :-)
>
> Basically, we're being asked to compensate for poor conduct on the
> part of an administrator who changed the securelevel without knowing
> what he was doing. We can't compensate for poor change control in our
> documentation.
I think there is a valid point. The settimeofday(2) call returns
success even though the change requested by the call is not really
done. This is somewhat questionable behavior. The documentation for
settimeofday(2) was not clear about how this works under elevated
securelevel(8), and in fact, the documentation is actually wrong
(which I will fix shortly).
--
"It's always funny until someone gets hurt. Then it's hilarious."
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020116010937.K31328>