Re: OpenBSD (Network) ACLs

[Hans Insulander <hin@hin.nu>]

Andi <andi@void.at> writes:

> Hi,
> 
> I'm a systemadministrator for an OpenBSD server. I have
> approximatly 25 users and I dont want that every user 
> can use bind()/connect() with/to any address/port. Therefore
> I wrote a kernel patch to restrict bind()/connect() for users.
> The communication is done via another pseudo device over ioctl.
> 
> More Info:
> http://void.at/~andi/openbsdacl/
> 
> What do you think about it?

I think you should take a look at systrace(1). It does this and much more,
and it's included in OpenBSD 3.2.

-- 
--- Hans Insulander <hin@hin.nu>, SM0UTY -------------------------------
Gravity never looses. The best you can hope for is a draw.