On Fri, Jul 30, 1999 at 05:42:57PM -0600, Warner Losh wrote: > In message <pine.bsf.4.10.9907301619280.6951-100...@janus.syracuse.net> > "Brian F. Feldman" writes: > : And how about having > : if (securelevel > 3) > : return (EPERM); > : in bpf_open()? > > There are no security levels > 3. I'd be happy with > 0. This is > consistant with the meaning of "raw devices".
I hope you mean "> 1". I often diagnose problems using tcpdump etc., and I don't think bpf should be broken just because someone wants the minor "flags can't be turned off" feature of level 1. It seems to be that disabling bpf is more appropriate for security level 2 and up, if such a thing is desirable. I'm not sure it is. -- Christopher Masto Senior Network Monkey NetMonger Communications ch...@netmonger.net i...@netmonger.net http://www.netmonger.net Free yourself, free your machine, free the daemon -- http://www.freebsd.org/ To Unsubscribe: send mail to majord...@freebsd.org with "unsubscribe freebsd-hackers" in the body of the message
