Improvements to ipfw code (followup)
Alexey Dokuchaev
danfe at cytherea.weblab.nsu.ru
Sun Jul 3 00:05:25 GMT 2005
On Tue, Feb 19, 2002 at 11:40:03AM -0500, Robert Watson wrote:
> Just as a slight follow-up I should have included in my earlier e-mail:
> the merging of ucred and pcred should make this patch now be able to
> support real and saved uids/gids as well as effective uids/gids, meaning
> that it can be used to also restrict setuid applications such as ping.
Cool! Right now I am cleaning up this 5-year old patch to catch up with
current IPFW code, fixing possible bugs, and separating optimizations
and features stuff for easier reviewing and testing. I like the idea of
supporting real and saved uids/gids as well as effective ones, I think
I will include this functionality as soon as I get the whole thing working
with current -CURRENT.
Regs,
Alexey Dokuchaev
To Unsubscribe: send mail to majordomo at FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message
More information about the freebsd-ipfw
mailing list