From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-vs1-f50.google.com (mail-vs1-f50.google.com [209.85.217.50]) by sourceware.org (Postfix) with ESMTPS id 54A743858C50 for ; Thu, 20 Apr 2023 12:07:07 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 54A743858C50 Authentication-Results: sourceware.org; dmarc=fail (p=none dis=none) header.from=opensuse.org Authentication-Results: sourceware.org; spf=none smtp.mailfrom=cristianrodriguez.net Received: by mail-vs1-f50.google.com with SMTP id ada2fe7eead31-4300c794440so18587137.1 for ; Thu, 20 Apr 2023 05:07:07 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1681992427; x=1684584427; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=Xs4NuTXjZB+CxR6/lhp4PFsaTaOko9yFIquhShWRWx4=; b=e99rFoES9MeSm/1yoN7FHjLsdvoN9nSTeNEWUW3qD0SuaJSv9lQsBIp+5Xc3QcOxl0 XiyIQQ7TxZlvJIEJ6dva7HsgnpReNSyqwnQNi9Wh/bCxLcJsrZwAoCJGGj5PAMX9WiZR CNAyGph9qLMVeQjn9lWSuAkSjUWWde0zOl9paPruXP5vY8XlFPhC4c66M39M0w79UvyC xCPyW0sd2eiF72iScOQYTi06g9z8DaAk8hZkvT/rKBfDxlPGgwB0bZr1zdCqQ27HiMbx r386LwYggSQ9jHB/m53IUKwd4UDBTAAtFgbuW23VwLBh5k6Ug4Lh4NiNkRKG5ZLyeMU3 RxyA== X-Gm-Message-State: AAQBX9dB6c/6D2prFM/5pghSgABeJUpZfAlLUNK8XPmG6FRP37kftczS GlqXNs7ZJwMbPPFFXuIsRbruK6zMz5KFJdHLlSNFqqFXHsXKM9Hc X-Google-Smtp-Source: AKy350b/tgOoI+C0JhemUDjaZRweSogzcdkPBFVC8X/+CeX8mBtIyqGtp1lRlaIXsNbIwPT5KJ5bBysNNsyC3Xmgvlg= X-Received: by 2002:a1f:a845:0:b0:443:e276:1b22 with SMTP id r66-20020a1fa845000000b00443e2761b22mr431661vke.0.1681992426783; Thu, 20 Apr 2023 05:07:06 -0700 (PDT) MIME-Version: 1.0 References: <20230419160207.65988-1-bugaevc@gmail.com> <20230419160207.65988-5-bugaevc@gmail.com> <55526044-5046-fafe-319b-bd281e85a2e2@linaro.org> In-Reply-To: <55526044-5046-fafe-319b-bd281e85a2e2@linaro.org> From: =?UTF-8?Q?Cristian_Rodr=C3=ADguez?= Date: Thu, 20 Apr 2023 08:06:55 -0400 Message-ID: Subject: Re: [RFC PATCH v2 4/7] csu: Fix standard fds' mode To: Adhemerval Zanella Netto Cc: Sergey Bugaev , libc-alpha@sourceware.org, bug-hurd , Samuel Thibault Content-Type: multipart/alternative; boundary="0000000000001d1aa605f9c361a5" X-Spam-Status: No, score=-1.0 required=5.0 tests=BAYES_00,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,KAM_DMARC_NONE,KAM_DMARC_STATUS,KAM_LAZY_DOMAIN_SECURITY,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_NONE,TXREP,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: --0000000000001d1aa605f9c361a5 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Thu, Apr 20, 2023 at 7:47=E2=80=AFAM Adhemerval Zanella Netto < adhemerval.zanella@linaro.org> wrote: > > > > I am not really sure how effective is this hardening, it seems more a > development one to enforce that system daemon are spawned correctly. > Exactly, my understanding is that it is a futile exercise ..if one sufficient privilege at that stage one can do whatever is desired.. why even bother messing with the standard fds.. --0000000000001d1aa605f9c361a5--