User mounts could not use character conversions (libkiconv is just for roots)

Boris Popov bp at freebsd.org
Tue Dec 2 22:09:05 PST 2003


On Tue, Dec 02, 2003 at 05:38:05PM +0100, Rudolf Cejka wrote:
> 
>   I have found, that user mounts using libkiconv.so (msdosfs, cd9660, ...)
> could not use character code conversions, beause writing to sysctl
> kern.iconv.add is allowed just for root. Personally, I have created
> small patch, which allows to change kern.iconv.add to anybody, so it does
> work for me. Does anybody know, if there are security drawbacks and if
> it can or can not be commited?

	Probably it is not a good idea to allow users to load kernel iconv
tables because one can waste a lot of memory by loading of all possible
conversion schemes.  The better solution is to add some kind of preload
ability which could be used on startup.

-- 
Boris Popov
http://rbp.euro.ru


More information about the freebsd-current mailing list