[30706] in bugtraq
Re: Email marketing company gives out questionable security advice
daemon@ATHENA.MIT.EDU (D. J. Bernstein)
Sat Jul 12 18:25:31 2003
Date: 12 Jul 2003 21:30:31 -0000
Message-ID: <20030712213031.60968.qmail@cr.yp.to>
From: "D. J. Bernstein" <djb@cr.yp.to>
To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
I wrote:
: P.S. It's hard for a portable chroot tool to cut off a program's network
: access. Kernel designers should provide a disablenetwork() syscall, with
: the disabling inherited by children.
I've set up a web page http://cr.yp.to/unix/disablenetwork.html
discussing this and surveying the system-specific suggestions that
people have sent to me. Further contributions are welcome.
---D. J. Bernstein, Associate Professor, Department of Mathematics,
Statistics, and Computer Science, University of Illinois at Chicago
