Subject: Re: dhcpd(8) _cannot_ be completely disabled on an interface
To: None <tech-net@netbsd.org, tech-security@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-net
Date: 01/08/2002 15:06:05
>>>>>> [...IP_RECVIF...if_index...]
I think it would be easy to make IP_RECVIF - or something similar,
cloned from it, IP_RECVIFNAME maybe - give you the interface name
instead of the number. Of course, it will be variable-size; this may
complicate your userland code somewhat. Want me to try?
>>> [panic upon experimenting with routing sockets]
>> I'm inclined to agree with you in this case. But when you're
>> running as root, the "userland being able to panic the machine is
>> always a bug" dictum is no longer really valid; consider
>> dd if=/dev/zero of=/dev/mem.
> yes, but there's a vast difference between "if i do this, i intend to
> shoot myself in the foot" and "i will try this and expect the kernel
> to protect my foot" expectations.
Oh, certainly. Just remarking that I have had a great deal of trouble
codifying that the line between "that's a bug" and "so don't do that".
/~\ The ASCII der Mouse
\ / Ribbon Campaign
X Against HTML mouse@rodents.montreal.qc.ca
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B