Re: [PATCH] caching daemon release and nsswitch patches

From: Michael Bushkov <bushman_at_rsu.ru>
Date: Tue, 30 Aug 2005 17:32:52 +0400 (MSD)
On Mon, 29 Aug 2005, Dan Nelson wrote:

We can't ensure that, I guess. In the upcoming version (before the 1st of 
September), the cache would be per-user. This would solve all the security 
problems. In a little while, I'll implement the ability for cached to act 
as nscd. So you'll be able to choose the behaviour.

> In the last episode (Aug 29), Michael Bushkov said:
>> There is some information in my project's description here:
>> http://wikitest.freebsd.org/moin.cgi/NsswitchAndCachingTechnicalDetails
>
> One question that comes to mind:
>
> It looks like the end-user application is still responsible for
> performing nss lookups.  How do you ensure that one user can't poison
> the cache and cause problems for other users?  Could cached do all nss
> operations itself (making it more like nscd in other OSes)?
>
> --
> 	Dan Nelson
> 	dnelson_at_allantgroup.com
>

With best regards,
Michael Bushkov
Rostov State University
Received on Tue Aug 30 2005 - 11:29:12 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:42 UTC