Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 19 Oct 2001 18:57:02 +0100
From:      Brian Somers <brian@freebsd-services.com>
To:        Ruslan Ermilov <ru@FreeBSD.org>
Cc:        Brian Somers <brian@freebsd-services.com>, Brian Somers <brian@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, brian@freebsd-services.com
Subject:   Re: cvs commit: src/usr.sbin/ppp arp.c 
Message-ID:  <200110191757.f9JHv2b02907@hak.lan.Awfulhak.org>
In-Reply-To: Message from Ruslan Ermilov <ru@FreeBSD.org>  of "Fri, 19 Oct 2001 20:39:48 %2B0300." <20011019203948.J24666@sunbay.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> On Fri, Oct 19, 2001 at 06:18:09PM +0100, Brian Somers wrote:
> > > On Fri, Oct 19, 2001 at 09:52:15AM -0700, Brian Somers wrote:
> > > > brian       2001/10/19 09:52:15 PDT
> > > > 
> > > >   Modified files:        (Branch: NETGRAPH)
> > > >     usr.sbin/ppp         arp.c 
> > > >   Log:
> > > >   MFC: Write static arp entries as uid 0
> > > >   
> > > >   Revision  Changes    Path
> > > >   1.38.2.4  +2 -2      src/usr.sbin/ppp/arp.c
> > > > 
> > > So that was indeed required after my rtsock.c changes?
> > 
> > Yes - previously ppp used to depend on the fact that it opened the 
> > SOCK_RAW socket as uid 0.  Now it must have uid 0 when it writes to 
> > the socket too.
> > 
> I recall telling you that OpenBSD should be vulnerable to this
> too, and you told you'll have to check this.

The OpenBSD code *looks* like it needs it too (and it now has it).  I 
haven't tested this yet though.

> Cheers,
> -- 
> Ruslan Ermilov		Oracle Developer/DBA,
> ru@sunbay.com		Sunbay Software AG,
> ru@FreeBSD.org		FreeBSD committer,
> +380.652.512.251	Simferopol, Ukraine
> 
> http://www.FreeBSD.org	The Power To Serve
> http://www.oracle.com	Enabling The Information Age

-- 
Brian <brian@freebsd-services.com>                <brian@Awfulhak.org>
      http://www.freebsd-services.com/        <brian@[uk.]FreeBSD.org>
Don't _EVER_ lose your sense of humour !      <brian@[uk.]OpenBSD.org>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200110191757.f9JHv2b02907>