On Fri, Jul 30, 1999 at 05:42:57PM -0600, Warner Losh wrote: > In message <[email protected]> > "Brian F. Feldman" writes: > : And how about having > : if (securelevel > 3) > : return (EPERM); > : in bpf_open()? > > There are no security levels > 3. I'd be happy with > 0. This is > consistant with the meaning of "raw devices".
I hope you mean "> 1". I often diagnose problems using tcpdump etc., and I don't think bpf should be broken just because someone wants the minor "flags can't be turned off" feature of level 1. It seems to be that disabling bpf is more appropriate for security level 2 and up, if such a thing is desirable. I'm not sure it is. -- Christopher Masto Senior Network Monkey NetMonger Communications [email protected] [email protected] http://www.netmonger.net Free yourself, free your machine, free the daemon -- http://www.freebsd.org/ To Unsubscribe: send mail to [email protected] with "unsubscribe freebsd-hackers" in the body of the message
