Re: systrace insecure [was: Re: chroot browser]

2009-04-03 Thread Niels Provos
On Thu, Mar 26, 2009 at 8:23 AM, Jonathan Schleifer wrote: > It was removed when I reported a bug in NETBSD-5-0 that would crash > the Kernel when you tried to use systrace. Instead of fixing that, > they removed it. Looks like you will have to run OpenBSD then. For my personal use, I find syst

Re: poll(2) vs kqueue(2) performance

2008-04-23 Thread Niels Provos
On Mon, Apr 21, 2008 at 2:05 PM, Gilles Chehade <[EMAIL PROTECTED]> wrote: > Yay, I too fell in love with it and it's various API's despite the lack > of documentation for most of them, header help understanding how things > work but I wasted quite some time on bufferevents ;-) The documentatio

Re: systrace/sysjail wrappers security

2007-08-09 Thread Niels Provos
There is a straight forward solution for this problem. The initial prototype of Systrace had a look-aside buffer in the kernel for copyin. I told Robert about this, not sure if he mentioned that in his paper or not. There obviously would be some associated performance impacts. Niels. On 8/7/0