atom feed36 messages in org.freebsd.freebsd-securityRe: Security Model/Target for FreeBSD...
FromSent OnAttachments
Colman ReillyJul 5, 1997 3:43 am 
Adam ShostackJul 5, 1997 8:17 am 
Colman ReillyJul 5, 1997 2:33 pm 
Jordan K. HubbardJul 5, 1997 4:47 pm 
Christopher PetrilliJul 6, 1997 11:27 am 
Jonathan M. BreslerJul 6, 1997 2:50 pm 
Brian MitchellJul 6, 1997 3:20 pm 
Jonathan M. BreslerJul 6, 1997 5:13 pm 
Colman ReillyJul 7, 1997 1:45 am 
Duane H. HesserJul 7, 1997 7:48 am 
Robert N WatsonJul 7, 1997 10:08 am 
Brian MitchellJul 7, 1997 10:58 am 
Adam ShostackJul 7, 1997 11:03 am 
Sean Eric FaganJul 7, 1997 11:37 am 
Robert N WatsonJul 7, 1997 11:46 am 
Jonathan M. BreslerJul 7, 1997 11:53 am 
Robert WatsonJul 7, 1997 1:04 pm 
Kenneth StaileyJul 7, 1997 1:05 pm 
Brian MitchellJul 7, 1997 1:38 pm 
pro...@suburbia.netJul 7, 1997 2:29 pm 
Jim ShanklandJul 7, 1997 3:46 pm 
Daniel O'CallaghanJul 7, 1997 4:20 pm 
Mark NewtonJul 7, 1997 4:47 pm 
Adam ShostackJul 7, 1997 5:58 pm 
Adam ShostackJul 7, 1997 6:09 pm 
Poul-Henning KampJul 7, 1997 11:10 pm 
Robert WatsonJul 8, 1997 8:45 am 
Robert WatsonJul 8, 1997 8:58 am 
Colman ReillyJul 8, 1997 12:33 pm 
Ollivier RobertJul 8, 1997 1:20 pm 
George RobbinsJul 8, 1997 1:59 pm 
Mark NewtonJul 8, 1997 5:29 pm 
Robert WatsonJul 9, 1997 9:09 am 
Eivind EklundJul 9, 1997 9:57 am 
David HollandJul 9, 1997 3:09 pm 
Wes PetersJul 9, 1997 10:07 pm 
Subject:Re: Security Model/Target for FreeBSD or 4.4?
From:Jim Shankland (ja@flyingfox.com)
Date:Jul 7, 1997 3:46:36 pm
List:org.freebsd.freebsd-security

something along the lines of:

net.inet.ip.<portnumber> <uid>

and then using it like

sysctl -w net.inet.ip.25=`id smtp`

Unfortunately, that doesn't address the distinction between TCP and UDP services.. I'm not sure that is a huge issue, but it seems relevant.

Sure, that should be:

sysctl -w net.inet.tcp.25=`id smtp` sysctl -w net.inet.udp.53=`id named`

or whatever. No biggie.

Of course, we already have a permissions system. Why not:

-rw-rw---- 1 root smtp Feb 18 09:33 /protocols/inet/tcp/25

Or is that just too weird?

Jim Shankland Flying Fox Computer Systems, Inc.