Re: [PATCH] Dangerous jail()<->ioctl interactions.

2005-02-26 Thread Wojciech A. Koszek
On Thu, Feb 24, 2005 at 01:03:17AM +0800, Xin LI wrote: > On Mon, Feb 21, 2005 at 10:16:56PM +, Wojciech A. Koszek wrote: > > Hello hackers, > > I would like to let you know I've been doing [partial] audit of ioctl() [..] > > connections. > Default devfs configuration for a jail is not to mount

Re: [PATCH] Dangerous jail()<->ioctl interactions.

2005-02-23 Thread Xin LI
On Mon, Feb 21, 2005 at 10:16:56PM +, Wojciech A. Koszek wrote: > Hello hackers, > I would like to let you know I've been doing [partial] audit of ioctl() > code. There are some places, which may interest you. These are: > > sys/cam/cam_xpt.c > sys/contrib/ipfilter/netinet/ip_fil.c > sys/contr

Re: [PATCH] Dangerous jail()<->ioctl interactions.

2005-02-23 Thread Joerg Sonnenberger
On Mon, Feb 21, 2005 at 10:16:56PM +, Wojciech A. Koszek wrote: > Hello hackers, > I would like to let you know I've been doing [partial] audit of ioctl() > code. There are some places, which may interest you. These are: > > sys/cam/cam_xpt.c > sys/contrib/ipfilter/netinet/ip_fil.c > sys/contr

[PATCH] Dangerous jail()<->ioctl interactions.

2005-02-21 Thread Wojciech A. Koszek
Hello hackers, I would like to let you know I've been doing [partial] audit of ioctl() code. There are some places, which may interest you. These are: sys/cam/cam_xpt.c sys/contrib/ipfilter/netinet/ip_fil.c sys/contrib/pf/net/pf_ioctl.c sys/dev/ata/ata-all.c sys/dev/md/md.c sys/geom/geom_ctl.c Th