Re: RFC: Removing file(1)+libmagic(3) from the base system

In message: <46546E16.9070707@xxxxxxxxxxx>
Colin Percival <cperciva@xxxxxxxxxxx> writes:
: FreeBSD architects and file(1) maintainer,
:
: I'd like to remove file(1) and libmagic(3) from the FreeBSD base system
: for the following reasons:
: 1. I don't see it as being a necessary component of a UNIX-like operating
: system.
: 2. It's available in the ports tree.
: 3. Due to its nature as a program which parses multiple data formats, it
: poses an unusually high risk of having security problems in the future
: (cf. ethereal/wireshark).
:
: The one redeeming feature of file/libmagic as far as security is concerned
: is that it doesn't act as a daemon, i.e., other code or user intervention
: is required for an attacker to exploit security issues. This is why I'm
: asking here rather than wielding the "Security Officer can veto code which
: he doesn't like" stick. :-)
:
: Can anyone make a strong argument for keeping this code in the base system?

Because it is so darn useful, people use it in scripting all the time
and it has been there for a long time.

Warner
_______________________________________________
freebsd-arch@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-arch
To unsubscribe, send any mail to "freebsd-arch-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • RFC: Removing file(1)+libmagic(3) from the base system
    ... I'd like to remove fileand libmagicfrom the FreeBSD base system ... The one redeeming feature of file/libmagic as far as security is concerned ... Can anyone make a strong argument for keeping this code in the base system? ... FreeBSD Security Officer ...
    (freebsd-arch)
  • Re: freebsd-security Digest, Vol 120, Issue 1
    ... Adding OpenBSD sudo to the FreeBSD base system? ... Usually I've installed it as a package off the install CD, ...
    (FreeBSD-Security)
  • Re: Dumb question about ports/packages
    ... Or is just wise to leave the base alone and upgrade when a new ... follow the security branch for your ... > of base system vunerabilities. ... FreeBSD is designed to work ...
    (freebsd-questions)
  • Re: RFC: Removing file(1)+libmagic(3) from the base system
    ... The one redeeming feature of file/libmagic as far as security is concerned ... is that it doesn't act as a daemon, i.e., other code or user intervention ... Can anyone make a strong argument for keeping this code in the base system? ... which can reprogram your terminal emulation and in some cases ...
    (freebsd-arch)
  • Re: [Removal of mrouted in FreeBSD-7.0]
    ... What are the things that needs to be considered if we are going to implement PIM-SM and or PIM-DM to the current FreeBSD network subsystem? ... The goal is to be able FreeBSD to provide native IP multicast using PIM just like the way DVMRP protocol is implemented before as part of the base system. ... I really think the remit of multicast routing is too wide to be addressed in the base system, which is why projects like XORP and pimdd exist -- it doesn't strike me as a good fit for the FreeBSD base system. ... Separate projects already exist for this. ...
    (freebsd-net)