--oC1+HKm2/end4ao3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 27, 2005 at 05:42:00PM +0200, Hubert Feyrer wrote:
> On Sat, 27 Aug 2005, Elad Efrat wrote:
>=20
> Last, a question: do I understand it correctly that those two sysctl knob=
s=20
> allow/disallow retrieving process stats sysctls (e.g. for ps(1)) and=20
> network stats sysvtls (e.g. for netstats(1)) for all/only the owner (and=
=20
> root) of a process?
>=20
> How about not showing processes e.g. outside a chroot, like we already do=
=20
> for mountpooints?
>=20
> Mayve this whole "privacy" thing should be discussed through first...=20
> ("design"?)

Can we please not?

This thread started with Geert asking if we could commit a patch that was
brough up over a year ago. The patch implements something we have talked=20
about for MANY years; I think I remember hearing about this back when I=20
was at NAS, which was 1999.

If we wait for an ideal design, we will be waiting a while longer.=20
Hopefully not a year or two, but definitely longer. We will get something=
=20
better, but we will wait.

I personally would rather we implement either Rui or Elad's=20
implementations for now and then replace them when we decide what better=20
solution we want. 1) we make further progress. We are incrimentally better=
=20
now and will be more so in the future. 2) We gain operational experience.=
=20
We find out what folks REALLY need.

Take care,

Bill

--oC1+HKm2/end4ao3
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (NetBSD)

iD8DBQFDE0k2Wz+3JHUci9cRAsx/AJ0ZGruDR26o+nhqg4LUPjSlWzcUmACfQ+H5
xAW+wrI0413kqd9iJ+YZdA0=
=NMCt
-----END PGP SIGNATURE-----

--oC1+HKm2/end4ao3--