From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <932e2dcf6c7cc416329e51ff3789f75d@plan9.bell-labs.com> To: 9fans@cse.psu.edu Subject: Re: [9fans] 4th edition file server available From: "Russ Cox" In-Reply-To: <14897aa3a24d632f340f30863deb7850@hamnavoe.demon.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Date: Mon, 13 Jan 2003 12:13:51 -0500 Topicbox-Message-UUID: 402a2b50-eacb-11e9-9e20-41e7f4b1d025 > Would it be feasible, as part of bootstrapping a minimal fossil > server, to remove or otherwise disable the exec system call > once everything was running? Of course. Go ahead if you really want. I don't want to live in that environment. There are no buffer overflows anyway. ;-) I _really_ like the fact that I can run other programs on the file server now, like flchk. I'm not going back. I think it's reasonable not to run any services on the machine other than fossil, and to connect with a serial console to run other things. Disabling exec strikes me as extreme.