Re: FreeBSD Security in Multiuser Environments

2012-04-02 Thread Da Rock
On 04/02/12 17:48, Ian Smith wrote: In freebsd-questions Digest, Vol 408, Issue 10, Message: 5 On Sat, 31 Mar 2012 21:05:00 +0700 Erich Dollansky wrote: > On Saturday 31 March 2012 20:26:14 Julian H. Stacey wrote: [..] > > Da Rock wrote: > > > On 03/31/12 17:46, Julian H. Stacey wro

Re: FreeBSD Security in Multiuser Environments

2012-04-02 Thread Ian Smith
In freebsd-questions Digest, Vol 408, Issue 10, Message: 5 On Sat, 31 Mar 2012 21:05:00 +0700 Erich Dollansky wrote: > On Saturday 31 March 2012 20:26:14 Julian H. Stacey wrote: [..] > > Da Rock wrote: > > > On 03/31/12 17:46, Julian H. Stacey wrote: [..] > > > > schu...@ime.usp.br wrote: >

Re: FreeBSD Security in Multiuser Environments

2012-04-01 Thread Matthew Seaman
On 01/04/2012 09:47, Peter Vereshagin wrote: >> Also, thanks for Capsicum, it sure is useful. > Who is that? Robert Watson, Jonathan Anderson and Ben Laurie are the principle 'who' behind Capsicum. Now, if you'ld asked 'What is that?' I'd've pointed you towards https://www.cl.cam.ac.uk/rese

Re: FreeBSD Security in Multiuser Environments

2012-04-01 Thread Peter Vereshagin
Hello. 2012/03/30 22:44:16 -0300 schu...@ime.usp.br => To freebsd-questions@freebsd.org : > P.S.: If you want to attain desktop security, matters get even more > complicated. If anyone is interested, I can discuss what I did there > (basically virtual X servers and building ports as regular user

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Erich Dollansky
Hi, On Saturday 31 March 2012 20:26:14 Julian H. Stacey wrote: > Hi, > Reference: > > From: Da Rock > > Date: Sat, 31 Mar 2012 21:25:37 +1000 > > Message-id: <4f76e9b1.5040...@herveybayaustralia.com.au> > > Da Rock wrote: > > On 03/31/12 17:46, Julian H. Stacey wro

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Julian H. Stacey
Hi, Reference: > From: Da Rock > Date: Sat, 31 Mar 2012 21:25:37 +1000 > Message-id: <4f76e9b1.5040...@herveybayaustralia.com.au> Da Rock wrote: > On 03/31/12 17:46, Julian H. Stacey wrote: > > Hi, > > Reference: > >> From: schu...@ime.usp.br > >> Date:

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Da Rock
On 03/31/12 17:46, Julian H. Stacey wrote: Hi, Reference: From: schu...@ime.usp.br Date: Fri, 30 Mar 2012 22:44:16 -0300 Message-id: <20120330224416.13643xk4rsfd2...@webmail.ime.usp.br> schu...@ime.usp.br wrote: Hello, I would like to raise a discussion about the secur

Re: FreeBSD Security in Multiuser Environments

2012-03-31 Thread Julian H. Stacey
Hi, Reference: > From: schu...@ime.usp.br > Date: Fri, 30 Mar 2012 22:44:16 -0300 > Message-id: <20120330224416.13643xk4rsfd2...@webmail.ime.usp.br> schu...@ime.usp.br wrote: > Hello, > > I would like to raise a discussion about the security features > of FreeBSD as a whole a

FreeBSD Security in Multiuser Environments

2012-03-30 Thread schultz
Hello, I would like to raise a discussion about the security features of FreeBSD as a whole and how they might be employed to actually derive some meaningful guarantees. I have found myself administering a system with many potentially untrusted users. Furthermore, some users do not trust some of