Re: [uml-devel] RE: uml_switch security fixing

2005-03-09 Thread Blaisorblade
On Monday 07 March 2005 05:42, Steve Schmidtke wrote: Blaisorblade wrote: Hey, has anyone found the time to put together any patch to workaround the security bug in uml_net? Attached are two patches. The first one, uml_net-slip.diff, is the minimal patch to apply to uml_net. The second

Re: [uml-devel] Re: uml_switch security fixing

2005-03-09 Thread Blaisorblade
On Thursday 03 March 2005 13:47, Nuutti Kotivuori wrote: [EMAIL PROTECTED] wrote: Suggestions? FWIW, we have gone off using switch daemon entirely. We are using simply preallocated tap devices, connected to bridges via normal Linux bridging controls. Works cleaner and faster, more places to

Re: [uml-devel] RE: uml_switch security fixing

2005-03-09 Thread Steve Schmidtke
Blaisorblade wrote: But an unpatched UML won't work with a newer uml_net binary (for SLIP usage only and only for closing the interface, I mean), right? Correct. I think uml_net would need to manage a database of who opened what to do what you suggest. I also looked at the versioning for

Re: [uml-devel] RE: uml_switch security fixing

2005-03-09 Thread Blaisorblade
On Wednesday 09 March 2005 19:53, Steve Schmidtke wrote: Blaisorblade wrote: But an unpatched UML won't work with a newer uml_net binary (for SLIP usage only and only for closing the interface, I mean), right? Correct. I think uml_net would need to manage a database of who opened what to

[uml-devel] Re: uml_switch security fixing

2005-03-03 Thread Nuutti Kotivuori
[EMAIL PROTECTED] wrote: Suggestions? FWIW, we have gone off using switch daemon entirely. We are using simply preallocated tap devices, connected to bridges via normal Linux bridging controls. Works cleaner and faster, more places to dump the traffic from and it allows normal linux traffic