home *** CD-ROM | disk | FTP | other *** search
- Subject: Re: Questions and suggestions
- Date: Thu, 9 Jun 94 23:15:20 CDT
- From: Juergen Lock <nox@jelal.north.de>
- In-Reply-To: <Pine.3.85.9406050042.A7246-0100000@cyber.proxxi.uf.se>; from "Elias M}rtensson" at Jun 5, 94 12:06 am
- Message-Id: <9406092115.AA00256@jelal.north.de>
-
- Elias M}rtensson writes:
-
- > Hello everybody! I'm new to this list so please excuse me if these issues
- > has already meen discussed.
- >
- > I've been using MultiTOS for quite some time now, trying to make it
- > UNIX-caompatible where ever possible. Now, there are a number of things I
- > would like to see in MiNT. Please tell me what the opinion thinks about
- > shese things:
- >
- > 1: Shouldn't all process files (in /proc) should have 644, not 600. So
- > that any user can get full information on them?
-
- hmm are there unix versions that do this? i think reading /proc can
- give away more info than the usual popen ("/bin/ps ..."), at least
- on MiNT...
- >
- > 2: A nice thing would be if you could change the mode-bits on the
- > TOS-filesystem-directories (i.e. u:/c), otherwise, it is impossible to
- > create a secure system. Since any user cn change, for example, teh
- > mint.cnf file. I would like to set these directories to 700.
-
- already done, get Michaels patch collection...
- >
- > 3: There are a number of system calls that _need_ to be superuser-only.
- > The most important of these are of course Super() and Supexec(), because
- > as long as any user can execute this instruction, the system can't be
- > secure. Other super-only instructions include Dsp_Reset, Dsp_LoadProg,
- > Jenabit, Setexec and other system calls that can crash the system.
-
- yes to make mint secure you need these, and more things. i guess the
- biggest problem here is TOS compatibility... :/
- >
- > 4: For these things to work, we need a working setuid-flag of course. I
- > was told that the setuid-flag is not yet implented, it it coming?
-
- hmm my /bin/su, uux, rnews have no problems. of course you cannot
- keep them on GEMDOS filesystems... :)
-
- > 8: Should a line be terminated by LF or CR/LF? Personally I don't like
- > CR/LF. A good example is the lf-flag (in stty). There is no way that I
- > can disable lf->cr/lf mapping because mintlib outputs the cr itself!
-
- is that the latest mintlib? sounds like a bug i patched a while ago...
-
- > And
- > it's difficult to open stdout/stderr in binary mode.
-
- well you can always put a `b' in UNIXMODE, or set __default_mode...
- the only problem is you better have no ^Ms left in files then or you
- still need to patch sources.
-
- cheers
- Juergen
- --
- J"urgen Lock / nox@jelal.north.de / UUCP: ..!uunet!unido!uniol!jelal!nox
- ...ohne Gewehr
- PGP public key fingerprint = 8A 18 58 54 03 7B FC 12 1F 8B 63 C7 19 27 CF DA
-