Messages in this thread | | | Date | Fri, 21 Sep 2007 13:45:04 +0100 | From | Christoph Hellwig <> | Subject | Re: [patch 5/5] VFS: allow filesystem to override mknod capability checks |
| |
On Fri, Sep 21, 2007 at 02:23:48PM +0200, Miklos Szeredi wrote: > From: Miklos Szeredi <mszeredi@suse.cz> > > Add a new filesystem flag, that results in the VFS not checking if the > current process has enough privileges to do an mknod(). > > This is needed on filesystems, where an unprivileged user may be able > to create a device node, without causing security problems.
A user should never be able to create devices. And no, I don't want to see a filesystem that implements it's own file operations for device nodes.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |