Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 15 Sep 2002 13:49:35 +0200
From:      Pawel Jakub Dawidek <nick@garage.freebsd.pl>
To:        Julian Elischer <julian@elischer.org>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: Changing process informations.
Message-ID:  <20020915114935.GU68652@garage.freebsd.pl>
In-Reply-To: <Pine.BSF.4.21.0209150430200.82711-100000@InterJet.elischer.org>
References:  <20020915105815.GT68652@garage.freebsd.pl> <Pine.BSF.4.21.0209150430200.82711-100000@InterJet.elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--2mNuWrpDTYoom6W8
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Sep 15, 2002 at 04:32:21AM -0700, Julian Elischer wrote:
+>=20
+>=20
+> On Sun, 15 Sep 2002, Pawel Jakub Dawidek wrote:
+>=20
+> > On Sat, Sep 14, 2002 at 11:05:11PM -0600, M. Warner Losh wrote:
+> > +> In message: <20020915030157.GP68652@garage.freebsd.pl>
+> > +>             Pawel Jakub Dawidek <nick@garage.freebsd.pl> writes:
+> > +> : Hello hackers...
+> > +> :=20
+> > +> : When I want change process real or effective uid in kld module
+> > +> : I got functions change_ruid() and change_euid().
+> > +> : I need change many others informations about process.
+> > +>=20
+> > +> Why do you want to cahnge the process real or effective id from a k=
ld
+> > +> module?  That seems to me to be violating the normal policy
+> > +> proceedures that the kernel should be enforcing.
+>=20
+> Ah I tink I found the name for the OpenBSD versin..
+> I think it's systrace..

Nope. Systrace is working like old cerb version:

	http://garage.freebsd.pl/cerb.tgz

It can downgrade permission, deny some actions, but it cannot add any
priviliges. Cerb-ng is something diffrent, check example configs.

With cerb-ng You don't need any set-uid-root binaries or root demons
and much more.

--=20
Pawel Jakub Dawidek
UNIX Systems Administrator
http://garage.freebsd.pl
Am I Evil? Yes, I Am.

--2mNuWrpDTYoom6W8
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iQCVAwUBPYRzzz/PhmMH/Mf1AQH+4QP/c8md0NAmbRdLNbf3/aFqNOb6UTgXzP+X
QoXN+2/2xMgzwx+o5t7slcWuCnkW1sr8ftJTa7OiwwEVASJdv95hK8lu3aq78Yuh
L1mCMMHV9ktssg2yE91J8bkAXoC11FyN0jaX38AvfY75UIWR0rCp9d9K54N0uvy8
YudfEG9BAPc=
=/sBe
-----END PGP SIGNATURE-----

--2mNuWrpDTYoom6W8--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020915114935.GU68652>