On 12/10/2019 03:04, Hiroki Sato wrote:
I emphasize again here that people who want to use dhcpcd are still able to install net/dhcpcd and override a combination of utilities such as rtsold. Ditto for ISC's IPv6-capable dhclient. My opinion about the import is that if we adopt dhcpcd in the base system, we should replace all of the current dhclient for IPv4 and rtsold together. Of course we should consider it will need Capsicum or privsep for sandboxing and involve a bigger impact for IPv4 users at least.
I agree with what you say entirely - and I would imagine similar work would be needed for any DHCP6 client. I have no idea how privsep or Capsicum should work under dhcpcd (I have zero knowledge in these areas) and would welcome any discussion to move this forwards.
For privsep, would it be enough to open ports, drop privs, read the message, validate the message and then send it to the root process? Or is there something more expected?
Roy _______________________________________________ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
