From owner-freebsd-chat Thu Sep 27 1:49:29 2001 Delivered-To: freebsd-chat@freebsd.org Received: from scaup.mail.pas.earthlink.net (scaup.mail.pas.earthlink.net [207.217.121.49]) by hub.freebsd.org (Postfix) with ESMTP id 98C6B37B430; Thu, 27 Sep 2001 01:49:26 -0700 (PDT) Received: from blossom.cjclark.org (dialup-209.247.141.88.Dial1.SanJose1.Level3.net [209.247.141.88]) by scaup.mail.pas.earthlink.net (EL-8_9_3_3/8.9.3) with ESMTP id BAA03716; Thu, 27 Sep 2001 01:49:24 -0700 (PDT) Received: (from cjc@localhost) by blossom.cjclark.org (8.11.4/8.11.3) id f8R8mcA78049; Thu, 27 Sep 2001 01:48:38 -0700 (PDT) (envelope-from cjc) Date: Thu, 27 Sep 2001 01:48:37 -0700 From: "Crist J. Clark" To: Robert Watson Cc: chat@FreeBSD.org Subject: Re: per-jail securelevels -- uncommited patches: ipf, kame, kern_linker.c Message-ID: <20010927014837.D360@blossom.cjclark.org> Reply-To: cjclark@alum.mit.edu References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from rwatson@FreeBSD.org on Wed, Sep 26, 2001 at 05:17:36PM -0400 Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Sep 26, 2001 at 05:17:36PM -0400, Robert Watson wrote: [SNIP] > o kern/kern_linker.c - this code makes securelevel checks without access [snip] > really make a difference, since jail'd processes couldn't load kernel > modules anyway. I should, however, be fixed. ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > Robert N M Watson FreeBSD Core Team, TrustedBSD Project > robert@fledge.watson.org NAI Labs, Safeport Network Services Now, now. No reason to get that down on yourself about that bug, Robert. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message