Date: Fri, 24 Jan 2003 10:04:53 +0100 From: phk@freebsd.org To: Giorgos Keramidas <keramida@ceid.upatras.gr> Cc: cvs-committers@freebsd.org, cvs-all@freebsd.org Subject: Re: cvs commit: src/lib/libc/stdlib malloc.c Message-ID: <8823.1043399093@critter.freebsd.dk> In-Reply-To: Your message of "Fri, 24 Jan 2003 04:49:46 %2B0200." <20030124024946.GB9500@gothmog.gr>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <20030124024946.GB9500@gothmog.gr>, Giorgos Keramidas writes: >On 2003-01-23 13:26, Poul-Henning Kamp <phk@FreeBSD.ORG> wrote: >> For "sensitive" processes, we always set the 'A' flag which causes >> abort() to be called on first sight of trouble. >> >> "sensitive" is somewhat arbitrarily defined as "setuid, setgid, uid >> == root or gid == wheel". >> >> The 'A' option carries no performance penalty. >> >> It is not possible to override this setting: fix the program instead. > >That's not always possible, if the program comes in binary-only >executables, but I guess nobody wants to run those binaries as >root or wheel, right? If you are in that kind of situation, you can recompile your own libc. There is always recourse when it's open source, it's only a matter of how easy it is. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8823.1043399093>