Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Oct 2001 17:19:01 +0100
From:      Nik Clayton <nik@freebsd.org>
To:        Robert Watson <rwatson@FreeBSD.org>
Cc:        "Andrey A. Chernov" <ache@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/etc group master.passwd
Message-ID:  <20011017171901.C88453@clan.nothing-going-on.org>
In-Reply-To: <Pine.NEB.3.96L.1011017100858.30170B-100000@fledge.watson.org>; from rwatson@FreeBSD.org on Wed, Oct 17, 2001 at 10:11:34AM -0400
References:  <200110171321.f9HDLrP93078@freefall.freebsd.org> <Pine.NEB.3.96L.1011017100858.30170B-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--GYkYyJI7bObpCn+O
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Oct 17, 2001 at 10:11:34AM -0400, Robert Watson wrote:
> This is good to see -- the whole nobody:nobody thing has worried me for a
> while, as it's used by a number of daemons to create a shared sandbox, and
> a failure of one daemon can lead to the failure of all others, as well as
> potential privilege escalation due to poor sandboxing techniques by any of
> those daemons.

Can we get all this documented somewhere?  Is there a canonical list of
what user names various ports expect and/or create?  If not, we should
have one (probably in the main Handbook, with a pointer to it in the
Porter's Handbook).

N
--=20
FreeBSD: The Power to Serve             http://www.freebsd.org/
FreeBSD Documentation Project           http://www.freebsd.org/docproj/

          --- 15B8 3FFC DDB4 34B0 AA5F  94B7 93A8 0764 2C37 E375 ---

--GYkYyJI7bObpCn+O
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjvNr3UACgkQk6gHZCw343WnpgCfel6PN2UNSEGnkKeTq/BrjoPU
poEAnR6+bDD0To1aBSl75o45BcR8lDwu
=Ior3
-----END PGP SIGNATURE-----

--GYkYyJI7bObpCn+O--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011017171901.C88453>