[Pdns-users] FreeBSD and mac_seeotheruids(4)

bert hubert ahu at ds9a.nl
Sat Aug 30 12:45:26 UTC 2003


On Wed, Jul 09, 2003 at 11:56:48AM -0400, Damian Gerow wrote:
> Out of curiousity, has anyone gotten pdns to run with a guardian process
> while also using mac_seeotheruids(4) on a FreeBSD 5.x system?  I've been
> playing with it, and it's the only thing on my machine that breaks (for

Won't work, pdns setuids itself, and becomes another user.

> obvious reasons), but I can't seem to find a way to exempt a user from the
> MAC policy, or to at least give explicit permissions within the policy.
> 
> For those who don't have a 5.x system on hand:
> 
>     The mac_seeotheruids policy module, when enabled, denies users to see
>     processes or sockets owned by other users.
> 
>  - Damian
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users

-- 
http://www.PowerDNS.com      Open source, database driven DNS Software 
http://lartc.org           Linux Advanced Routing & Traffic Control HOWTO


More information about the Pdns-users mailing list