Date: Sun, 4 Apr 1999 19:24:20 +0700 (ALMST) From: Boris Popov <bp@butya.kz> To: Brian Feldman <green@unixhelp.org> Cc: hackers@FreeBSD.ORG Subject: Re: ipfw uid Message-ID: <Pine.BSF.4.05.9904041917030.52001-100000@lion.butya.kz> In-Reply-To: <Pine.BSF.4.05.9904032202460.14820-100000@janus.syracuse.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 3 Apr 1999, Brian Feldman wrote:
> Is anyone interested in trying out my addition of per-uid firewalling
> capabilities to ipfw? I just did them today, but they seem to work fine.
> For instance, logging/accounting purpouses:
>
> {"/usr/src/sbin/ipfw"}# ipfw show
> 00050 8157 2864127 count ip from any to any uid 1000 in
> 00060 8952 1834453 count ip from any to any uid 1000 out
>
This should help to simplify accounting/access restriction on a
per-daemon basis. Good examples are httpd and bind (running in sandbox).
--
Boris Popov
http://www.butya.kz/~bp/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9904041917030.52001-100000>