Re: [patch] UNIX sockets support for lwresd

2012-01-17 Thread Danny Mayer
On 1/17/2012 5:57 AM, Ben Laurie wrote: On 17 January 2012 04:31, Danny Mayer ma...@gis.net mailto:ma...@gis.net wrote: This breaks O/S's that don't support Unix sockets, specifically Windows. Please explain why Unix domain sockets are more effective and secure rather than

[patch] UNIX sockets support for lwresd

2012-01-16 Thread Ilya Bakulin
Hi list, I'm working on Capsicum security framework [1] for the FreeBSD Project. While implementing sandbox mode for some applications like tcpdump, we have noticed that sandboxed applications are no longer able to resolve DNS names. This happens because each DNS resolving is done by making a