lkml.org 
[lkml]   [2009]   [Sep]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH] VFS: document what MAY_ACCESS means
From
Date
On Mon, 2009-09-21 at 09:10 +0100, Jamie Lokier wrote
> (Btw, side issue: I was very surprised to find fchdir() to an open
> directory can fail on NFS due to change of permissions, so the pattern
> dir = open("."); chdir("foo"); fchdir(dir) can fail to restore the
> current directory).

Welcome to the world of stateless server-enforced security. Unlike the
POSIX model, a NFS server doesn't have the ability to track what
permissions have already been checked using a file descriptor. It
therefore needs to check permissions on each RPC operation you perform
using the credential you present then and there.

Cheers
Trond



\
 
 \ /
  Last update: 2009-09-21 14:33    [W:0.048 / U:0.112 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site