Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 11 May 1999 14:29:02 -0700 (PDT)
From:      Thamer Al-Herbish <shadows@whitefang.com>
To:        Darren Reed <avalon@coombs.anu.edu.au>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Wrapping syscalls
Message-ID:  <Pine.BSF.4.05.9905111427460.253-100000@rage.whitefang.com>
In-Reply-To: <199905112123.HAA00753@cheops.anu.edu.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 12 May 1999, Darren Reed wrote:

> Logging would be interesting, as would write'ing data to be sent
> back to the client :-)  Lets hope they're not interested in using
> CGI either :-)

You would need some granulity I suppose. Just looked at the TIS
post, it's been done and done well it seems.

> This isn't a capability based solution in the traditional sense of
> that term, more of a means being able to deny yourself use of certain
> system calls.

Absolutely not.

--
Thamer Al-Herbish                     PGP public key:
shadows@whitefang.com                 http://www.whitefang.com/pgpkey.txt
[ The Secure UNIX Programming FAQ     http://www.whitefang.com/sup/  ]



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9905111427460.253-100000>