Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Feb 2002 09:39:33 +0600
From:      Alexey Dokuchaev <danfe@cytherea.weblab.nsu.ru>
To:        Robert Watson <rwatson@freebsd.org>
Cc:        arch@freebsd.org, ipfw@freebsd.org
Subject:   Re: Improvements to ipfw code (followup)
Message-ID:  <20020220093933.A78191@cytherea.weblab.nsu.ru>
In-Reply-To: <Pine.NEB.3.96L.1020219113924.388H-100000@fledge.watson.org>; from rwatson@freebsd.org on Tue, Feb 19, 2002 at 11:40:03AM -0500
References:  <20020219165630.A62749@cytherea.weblab.nsu.ru> <Pine.NEB.3.96L.1020219113924.388H-100000@fledge.watson.org>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Tue, Feb 19, 2002 at 11:40:03AM -0500, Robert Watson wrote:
> Just as a slight follow-up I should have included in my earlier e-mail:
> the merging of ucred and pcred should make this patch now be able to
> support real and saved uids/gids as well as effective uids/gids, meaning
> that it can be used to also restrict setuid applications such as ping.

Cool!  Right now I am cleaning up this 5-year old patch to catch up with
current IPFW code, fixing possible bugs, and separating optimizations
and features stuff for easier reviewing and testing.  I like the idea of
supporting real and saved uids/gids as well as effective ones, I think
I will include this functionality as soon as I get the whole thing working
with current -CURRENT.

Regs,
Alexey Dokuchaev

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ipfw" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20020220093933.A78191>