Subject: Re: dhcpd(8) _cannot_ be completely disabled on an interface
To: None <tech-net@netbsd.org, tech-security@netbsd.org>
From: der Mouse <mouse@Rodents.Montreal.QC.CA>
List: tech-net
Date: 01/08/2002 15:06:05
>>>>>> [...IP_RECVIF...if_index...]

I think it would be easy to make IP_RECVIF - or something similar,
cloned from it, IP_RECVIFNAME maybe - give you the interface name
instead of the number.  Of course, it will be variable-size; this may
complicate your userland code somewhat.  Want me to try?

>>> [panic upon experimenting with routing sockets]
>> I'm inclined to agree with you in this case.  But when you're
>> running as root, the "userland being able to panic the machine is
>> always a bug" dictum is no longer really valid; consider
>> dd if=/dev/zero of=/dev/mem.
> yes, but there's a vast difference between "if i do this, i intend to
> shoot myself in the foot" and "i will try this and expect the kernel
> to protect my foot" expectations.

Oh, certainly.  Just remarking that I have had a great deal of trouble
codifying that the line between "that's a bug" and "so don't do that".

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse@rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B