In message <[EMAIL PROTECTED]>, Matthew Dillon w
rites:
>    Doesn't OpenBSD have a syscall filtering mechanic where one can restrict
>    the file paths the program is allowed to access?

Yes they do.

Really smart programs modify the strings after the check and get
to access the files anyway.

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
[EMAIL PROTECTED]         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to