On Sat, Dec 24, 2011 at 2:05 AM, Andrey Chernov <a...@freebsd.org> wrote: > On Fri, Dec 23, 2011 at 07:51:43PM +0200, Kostik Belousov wrote: >> The __FreeBSD_libc_enter_restricted_mode() is, and its name is ugly >> exactly to note the ugly intent. I do not see how the symbol can go > > There must be no ugly intents and names. This whole idea just proves yet > one our @secteam ugliness. > > There must be ischroot(2) the same way we already have issetugid(2).
chroot(2) can create legitimate and secure environment where dlopen(2) is safe and necessary. Cheers, -- Xin LI <delp...@delphij.net> https://www.delphij.net/ FreeBSD - The Power to Serve! Live free or die _______________________________________________ svn-src-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/svn-src-all To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
