lkml.org 
[lkml]   [2006]   [Feb]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: VFS: Dynamic umask for the access rights of linked objects
Date
On Feb 28, 2006, at 22:54:15, Hauke Laging wrote:
> 6) In my scenario the VFS would add a step after 4): It would check
> if the symlink has been created by someone different from the
> process's uid and from root. If so there is the risk of abuse and
> the access check would be repeated for the symlink owner.
>
> 7) The VFS would find out that the symlink owner is not allowed to
> write to /etc/passwd. Thus the write access is prohibited, even for
> a process with superuser rights.

Feel free to write an LSM to do this, but it breaks POSIX specs a bit
and could cause problems with some programs, so it's not likely to
become the default behavior.

Cheers,
Kyle Moffett


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2006-03-01 05:24    [W:0.058 / U:23.752 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site