Ethereal-dev: Re: [Ethereal-dev] Priv sep in ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Stephen Samuel (leave the email alone)" <samnospam@xxxxxxxxxxx>
Date: Mon, 07 Feb 2005 23:21:40 -0800
I kinda squirm at the thought of loading yet more code into windows
memory on boot, ehen it's not always used.  I think that the best
approach would be to have it not loaded by default, but have it
still be an install-time option (for systems that use ethereal
rather often).

I realize that the code may not be all that big, but when
deciding policies, my backup thought is 'what would happen if
*everybody* did this?"  Besides, if it adds capabilities for
non-priveledged processes, some people might consider this to
be a security issue.


Lars Roland wrote:
Mark Pizzolato schrieb:
(snip)


The ethereal windows installer could probably be offer an option to enable the starting of NPF at system startup. This would completely solve privilege separation for Windows and avoid the overhead of attempting to do these things in a separate process and pass all data to a display process.

I've checked in a change to the installer. The option to start the NPF at system startup is disabled by default. Should it be enabled by default?

--
Stephen Samuel +1(604)876-0426             samnospam@xxxxxxxxxxx
		   http://www.bcgreen.com/
   Powerful committed communication. Transformation touching
     the jewel within each person and bringing it to light.