Re: new privsep for rsa and ca [was: [OpenSMTPD] master snapshot opensmtpd-201405071639 available]

2014-05-13 Thread Jason A. Donenfeld
On Mon, May 12, 2014 at 5:19 PM, Gilles Chehade gil...@poolp.org wrote: We have abused the term privsep, in this particular case it's not really privileges separation but really vmem. space separation. The goal was to isolate that code from the network, it could be done in the lookup process

Re: new privsep for rsa and ca [was: [OpenSMTPD] master snapshot opensmtpd-201405071639 available]

2014-05-13 Thread Gilles Chehade
On Tue, May 13, 2014 at 07:08:10PM +0200, Jason A. Donenfeld wrote: On Mon, May 12, 2014 at 5:19 PM, Gilles Chehade gil...@poolp.org wrote: We have abused the term privsep, in this particular case it's not really privileges separation but really vmem. space separation. The goal was to

Re: new privsep for rsa and ca [was: [OpenSMTPD] master snapshot opensmtpd-201405071639 available]

2014-05-12 Thread Gilles Chehade
On Fri, May 09, 2014 at 06:49:50PM +0200, Jason A. Donenfeld wrote: On Thu, May 8, 2014 at 2:56 PM, Gilles Chehade gil...@poolp.org wrote: On Thu, May 08, 2014 at 05:08:36AM +0200, Jason A. Donenfeld wrote: no, no new UID/username required Curious, then, as to what kind of privsep

Re: new privsep for rsa and ca [was: [OpenSMTPD] master snapshot opensmtpd-201405071639 available]

2014-05-09 Thread Jason A. Donenfeld
On Thu, May 8, 2014 at 2:56 PM, Gilles Chehade gil...@poolp.org wrote: On Thu, May 08, 2014 at 05:08:36AM +0200, Jason A. Donenfeld wrote: no, no new UID/username required Curious, then, as to what kind of privsep this provides...

Re: new privsep for rsa and ca [was: [OpenSMTPD] master snapshot opensmtpd-201405071639 available]

2014-05-08 Thread Gilles Chehade
On Thu, May 08, 2014 at 05:08:36AM +0200, Jason A. Donenfeld wrote: On Wed, May 7, 2014 at 4:43 PM, gil...@poolp.org wrote: - RSA engine privsep by reyk@ - ca process, by reyk Do these require new UIDs/usernames? no, no new UID/username required -- Gilles Chehade

new privsep for rsa and ca [was: [OpenSMTPD] master snapshot opensmtpd-201405071639 available]

2014-05-07 Thread Jason A. Donenfeld
On Wed, May 7, 2014 at 4:43 PM, gil...@poolp.org wrote: - RSA engine privsep by reyk@ - ca process, by reyk Do these require new UIDs/usernames?