From owner-freebsd-ipfw@FreeBSD.ORG Sun Jul 3 00:05:24 2005 Return-Path: X-Original-To: ipfw@freebsd.org Delivered-To: freebsd-ipfw@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F07D016A420; Sun, 3 Jul 2005 00:05:23 +0000 (GMT) (envelope-from ps@mu.org) Received: from elvis.mu.org (elvis.mu.org [192.203.228.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0C4F243D62; Sun, 3 Jul 2005 00:05:18 +0000 (GMT) (envelope-from ps@mu.org) Received: by elvis.mu.org (Postfix, from userid 1000) id 7017A5CC57; Sat, 2 Jul 2005 17:04:46 -0700 (PDT) Delivered-To: ps@mu.org Received: from mx2.freebsd.org (mx2.FreeBSD.org [216.136.204.119]) by elvis.mu.org (Postfix) with ESMTP id EC90AAE0C7; Tue, 19 Feb 2002 19:39:35 -0800 (PST) Received: from hub.freebsd.org (hub.FreeBSD.org [216.136.204.18]) by mx2.freebsd.org (Postfix) with ESMTP id 150C155D64; Tue, 19 Feb 2002 19:32:45 -0800 (PST) (envelope-from owner-freebsd-arch@FreeBSD.ORG) Received: by hub.freebsd.org (Postfix, from userid 538) id 3AAB737B416; Tue, 19 Feb 2002 19:39:28 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with SMTP id 13DA12E8080; Tue, 19 Feb 2002 19:39:28 -0800 (PST) Received: by hub.freebsd.org (bulk_mailer v1.12); Tue, 19 Feb 2002 19:39:27 -0800 Delivered-To: freebsd-arch@freebsd.org Received: from mail.nsu.ru (mx.nsu.ru [193.124.215.71]) by hub.freebsd.org (Postfix) with ESMTP id C4A0037B404; Tue, 19 Feb 2002 19:39:14 -0800 (PST) Received: from regency.nsu.ru ([193.124.210.26] helo=cytherea.weblab.nsu.ru) by mail.nsu.ru with esmtp (Exim 3.20 #1) id 16dNav-0003yV-00; Wed, 20 Feb 2002 09:39:01 +0600 Received: (from danfe@localhost) by cytherea.weblab.nsu.ru (8.11.6/8.11.6) id g1K3dXG80972; Wed, 20 Feb 2002 09:39:33 +0600 (NOVT) (envelope-from danfe) From: Alexey Dokuchaev To: Robert Watson Message-ID: <20020220093933.A78191@cytherea.weblab.nsu.ru> References: <20020219165630.A62749@cytherea.weblab.nsu.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: ; from rwatson@freebsd.org on Tue, Feb 19, 2002 at 11:40:03AM -0500 Sender: owner-freebsd-arch@FreeBSD.ORG X-Loop: FreeBSD.ORG Precedence: bulk Status: RO Lines: 18 Cc: arch@freebsd.org, ipfw@freebsd.org Subject: Re: Improvements to ipfw code (followup) X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Date: Sun, 03 Jul 2005 00:05:25 -0000 X-Original-Date: Wed, 20 Feb 2002 09:39:33 +0600 X-List-Received-Date: Sun, 03 Jul 2005 00:05:25 -0000 On Tue, Feb 19, 2002 at 11:40:03AM -0500, Robert Watson wrote: > Just as a slight follow-up I should have included in my earlier e-mail: > the merging of ucred and pcred should make this patch now be able to > support real and saved uids/gids as well as effective uids/gids, meaning > that it can be used to also restrict setuid applications such as ping. Cool! Right now I am cleaning up this 5-year old patch to catch up with current IPFW code, fixing possible bugs, and separating optimizations and features stuff for easier reviewing and testing. I like the idea of supporting real and saved uids/gids as well as effective ones, I think I will include this functionality as soon as I get the whole thing working with current -CURRENT. Regs, Alexey Dokuchaev To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message