Re: Closing information leaks in jails?

From: Pawel Jakub Dawidek (pjd_at_FreeBSD.org)
Date: 08/19/05

  • Next message: Sean P. Malone: "pam_radius fail open?" 
    Date: Fri, 19 Aug 2005 15:10:15 +0200
To: Benjamin Lutz <benlutz@datacomm.ch>

    On Thu, Aug 18, 2005 at 05:18:30PM +0200, Benjamin Lutz wrote:
    +> > - full dmesg output after boot and the kernel buffer when it overflows
    +> > (can contain sensitive information)
    +>
    +> If it's sensitive in so far as it endangers the privacy of local
    +> non-jailed users, I think that's a bug that'd need fixing.

    sysctl security.bsd.unprivileged_read_msgbuf=0 

    -- 
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd@FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

  • Next message: Sean P. Malone: "pam_radius fail open?"