[PATCH] caching daemon release and nsswitch patches

Michael Bushkov bushman at rsu.ru
Tue Aug 30 13:29:12 GMT 2005


On Mon, 29 Aug 2005, Dan Nelson wrote:

We can't ensure that, I guess. In the upcoming version (before the 1st of 
September), the cache would be per-user. This would solve all the security 
problems. In a little while, I'll implement the ability for cached to act 
as nscd. So you'll be able to choose the behaviour.

> In the last episode (Aug 29), Michael Bushkov said:
>> There is some information in my project's description here:
>> http://wikitest.freebsd.org/moin.cgi/NsswitchAndCachingTechnicalDetails
>
> One question that comes to mind:
>
> It looks like the end-user application is still responsible for
> performing nss lookups.  How do you ensure that one user can't poison
> the cache and cause problems for other users?  Could cached do all nss
> operations itself (making it more like nscd in other OSes)?
>
> --
> 	Dan Nelson
> 	dnelson at allantgroup.com
>

With best regards,
Michael Bushkov
Rostov State University


More information about the freebsd-current mailing list