Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Oct 2001 11:40:35 -0600
From:      Nate Williams <nate@yogotech.com>
To:        Dag-Erling Smorgrav <des@ofug.org>
Cc:        Garrett Wollman <wollman@khavrinen.lcs.mit.edu>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sys/kern kern_proc.c kern_prot.c uipc_socket.c uipc_usrreq.c src/sys/netinet raw_ip.c tcp_subr.c udp_usrreq.c
Message-ID:  <15300.34835.416990.972225@nomad.yogotech.com>
In-Reply-To: <xzpy9mjfq4z.fsf@flood.ping.uio.no>
References:  <200110092140.f99LeVA74145@freefall.freebsd.org> <xzp7ku3h6c8.fsf@flood.ping.uio.no> <200110101522.f9AFM0S63283@khavrinen.lcs.mit.edu> <xzpy9mjfq4z.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help
> > > > "Unprivileged processes may see subjects/objects with different real uid"
> > > Would people mind a lot if this variable defaulted to 0?
> > Hell yes.
> 
> That's not a constructive response.
> 
> To me, the ability of unprivileged users to obtain information about
> other users' processes and sockets is
> 
>  a) unnecessary
>  b) a violation of privacy
>  c) a security risk
> 
> Unless you can provide an argument showing that this is necessary to
> the correct operation of a FreeBSD system, I'll simply ignore your
> contribution to this discussion.

You're breaking dozens of years of history and thus violating POLA.



Nate

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15300.34835.416990.972225>