Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-security
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-security@g.o
From: "Brian G. Peterson" <brian@...>
Subject: Re: Re: [gentoo-hardened] Securing dhcpcd (client)
Date: Mon, 9 Oct 2006 14:06:15 -0500
On Monday 09 October 2006 13:37, 7v5w7go9ub0o wrote:
> Given my lack of expertise, I'll work on a patch later, and in the
> short   term I'll automate the momentary use of the dhcpcd client in a
> hardened jail to negotiate a connection; then record that information;
> then terminate dhcpcd; then use the recorded info and ifconfig or
> iproute2 to create a direct connection. A script or little C program.

Why not just use one of the other clients?

pump drops privs

udhcp drops privs

it looks like dhclient can be configured to drop privs

Why go throught the trouble to use dhcpcd?

Regards,

   - Brian

-- 
gentoo-security@g.o mailing list


Replies:
Re: Re: [gentoo-hardened] Securing dhcpcd (client)
-- 7v5w7go9ub0o
References:
Securing dhcpcd (client)
-- 7v5w7go9ub0o
Re: [gentoo-hardened] Securing dhcpcd (client)
-- Miguel Figueiredo Mascarenhas Sousa Filipe
Re: [gentoo-hardened] Securing dhcpcd (client)
-- 7v5w7go9ub0o
Navigation:
Lists: gentoo-security: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: [gentoo-hardened] Securing dhcpcd (client)
Next by thread:
Re: Re: [gentoo-hardened] Securing dhcpcd (client)
Previous by date:
Re: [gentoo-hardened] Securing dhcpcd (client)
Next by date:
Re: Re: [gentoo-hardened] Securing dhcpcd (client)


Updated Jun 17, 2009

Summary: Archive of the gentoo-security mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.