Date: Sat, 15 May 2004 22:04:01 +0200 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: Julian Elischer <julian@elischer.org> Cc: FreeBSD current users <current@FreeBSD.ORG> Subject: Re: jail and chflags [patch] Message-ID: <20040515200401.GB845@darkness.comp.waw.pl> In-Reply-To: <20040515175215.GA845@darkness.comp.waw.pl> References: <Pine.BSF.4.21.0405141637420.85816-100000@InterJet.elischer.org> <20040515175215.GA845@darkness.comp.waw.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
--te9Bkl2b4W0C+FfQ Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, May 15, 2004 at 07:52:15PM +0200, Pawel Jakub Dawidek wrote: +> On Fri, May 14, 2004 at 05:25:16PM -0700, Julian Elischer wrote: +> +> in fact experimentation in -current shows this to be correct.. +> +> in a jail: +> +>=20 +> +> xxx# chflags noschg libthr.so.1 +> +> xxx# ls -lo libthr.so.1 +> +> -r--r--r-- 1 root wheel - 611568 May 15 00:02 libthr.so.1 +> +> xxx# chflags schg libthr.so.1 +> +> xxx# ls -lo libthr.so.1 +> +> -r--r--r-- 1 root wheel schg 611568 May 15 00:02 libthr.so.1 +> +> xxx# =20 +> +>=20 +> +> comments? yeahs? neys? +>=20 +> Whoa! This looks very serious. Ok, false alarm:) After discussion with rwatson@ and cperciva@, it looks that changing those flags is permitted due to per-jail securelevels, which were intruduced in 5.x. --=20 Pawel Jakub Dawidek http://www.FreeBSD.org pjd@FreeBSD.org http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! --te9Bkl2b4W0C+FfQ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFApnexForvXbEpPzQRApEYAKCaPXroCz7OTCOm1E0WJONIysQ4BgCeKvB4 vzejmP5UrBeuy/XJWvaTC/4= =5KJR -----END PGP SIGNATURE----- --te9Bkl2b4W0C+FfQ--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040515200401.GB845>