svn commit: r228843 - head/contrib/telnet/libtelnet head/crypto/heimdal/appl/telnet/libtelnet head/include head/lib/libc/gen head/lib/libc/iconv head/lib/libc/include head/lib/libc/net head/libexec...

[Xin LI]

On Sat, Dec 24, 2011 at 2:05 AM, Andrey Chernov <ache at freebsd.org> wrote:
> On Fri, Dec 23, 2011 at 07:51:43PM +0200, Kostik Belousov wrote:
>> The __FreeBSD_libc_enter_restricted_mode() is, and its name is ugly
>> exactly to note the ugly intent. I do not see how the symbol can go
>
> There must be no ugly intents and names. This whole idea just proves yet
> one our @secteam ugliness.
>
> There must be ischroot(2) the same way we already have issetugid(2).

chroot(2) can create legitimate and secure environment where dlopen(2)
is safe and necessary.

Cheers,
-- 
Xin LI <delphij at delphij.net> https://www.delphij.net/
FreeBSD - The Power to Serve! Live free or die