OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: FreeBSDDEATH.c.txt (mmap dirty page no check bug)
From: Bruce M. Walker (bmwborderware.com)
Date: Wed Jun 07 2000 - 08:53:05 CDT

Cy Schubert - ITSD Open Systems Group wrote:
> Replacement candidates for /tmp and /var/tmp are:
>
> 1. Each user has a subdirectory in /tmp as /tmp/$USER. An idea brought
> forth to BUGTRAQ by Theo de Raadt of the OpenBSD project.
>
> 2. Each user maintains their own /tmp as $HOME/tmp or some such thing.
> An idea I had discussed with my co-workers a number of years ago.

#1 I'll buy into. I have actually implemented that for an HPUX-based
MIS system using a Progress db. All users have their own "playpen"
and cron sweeps up the all-too-frequent cores and printer temps.

#2 is *not* going to cut it when the user homes are NFS-mounted
from a central server(s). On the other hand, it's a good idea when
the server has more resources than the workstation (terabyte FC-disks
over gigabit ether).

Is this topic not drifting away from being strictly "freebsd-security"?

-bmw

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message