[Bug 211580] deny system message buffer access from jails

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[Bug 211580] deny system message buffer access from jails

bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211580

Jamie Gritton <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Open

--- Comment #15 from Jamie Gritton <[hidden email]> ---
(In reply to Joe Barbish from comment #13)

> "security.bsd.unprivileged_read_msgbuf" MIB should be implemented in the same manner as that used for "allow.raw_sockets". The default being not allowed.

I'm worried about making allow.read_msgbuf default to not allowed, for the
reason that current behavior wouldn't be preserved.  A jail without a
particular option should generally behave the same as an older jail when the
option didn't exist.  There may be exceptions to this, but I don't see it here.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-jail
To unsubscribe, send any mail to "[hidden email]"