Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 26 Jul 2000 22:54:22 -0500
From:      Chris Costello <chris@calldei.com>
To:        John Polstra <jdp@polstra.com>
Cc:        arch@FreeBSD.ORG
Subject:   Re: How much security should ldconfig enforce?
Message-ID:  <20000726225421.G30816@holly.calldei.com>
In-Reply-To: <XFMail.000726193613.jdp@polstra.com>
References:  <XFMail.000726193613.jdp@polstra.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday, July 26, 2000, John Polstra wrote:
> 1. It could allow anything, just like it did before I made my commit.
> 
> 2. It could strictly enforce secure ownerships, groups, and
> permissions -- i.e., keep last night's commit and add group
> writability checking too.
> 
> 3. It could default to strictly secure but accept a command-line
> option to relax the constraints.  And an rc.conf knob could be added
> to control whether or not it was strict at boot time.

   I like the third option.  You should be able to shoot yourself
in the foot if you _really_ want to.

-- 
|Chris Costello <chris@calldei.com>
|Those who can, do.  Those who cannot, teach.  Those who cannot teach, HACK!
`---------------------------------------------------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000726225421.G30816>