News for hackers. Stuff that matters.

A comment on Domesticating applications, OpenBSD style. Parent comment

Re:Domesticating applications, OpenBSD style by Canada on Wednesday July 22, 2015 @10:55AM (#9929960)
Of the pathnames contained in tame_namei(), how many are really going to change? I'm trying to think of a case where alternate names or paths are needed, yet nothing comes to mind.
[ Parent | on HN ]
Re:Domesticating applications, OpenBSD style by bodyfour on Wednesday July 22, 2015 @12:38PM (#9930669)
Certainly on other UNIXes getpwnam() can need a bunch of different files and sockets depending on what nsswitch.conf backend is in use. I guess OpenBSD doesn't support nsswitch at all (it looks like it just uses a pseudo-NIS damon "ypldap" if you want to use LDAP auth) but on most other UNIXes it doesn't work that way.

Similar arguments apply to host resolution, but these days it's almost always just /etc/hosts and DNS so less of an issue.

[ Parent | on HN ]