Subject: Re: extending chroot()
To: None <tech-security@netbsd.org>
From: Christos Zoulas <christos@zoulas.com>
List: tech-security
Date: 01/17/2003 18:40:45
In article <20030117041646.BB66C7B4D@berkshire.research.att.com>,
Steven M. Bellovin <smb@research.att.com> wrote:
>In message <20030117041148.85E45A@proven.weird.com>, "Greg A. Woods" writes:
>>[ On Thursday, January 16, 2003 at 16:08:57 (-0500), Steve Bellovin wrote: ]
>>> Subject: extending chroot()
>>>
>>> Comments?  (I wish that socket() went through the file system, so that 
>>> I could restrict network access that way, too.)
>>
>>Isn't this where someone's supposed to pipe up and say "If you wanted
>>Plan 9 then you know where to find it!"  :-)
>>

There is nothing wrong with the `everything is a file' approach, and over
the years many commercial and non commercial unixes have been gradually
doing that.

christos