From owner-freebsd-current  Thu Jan 30 12:52:37 2003
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3E58537B401
	for <freebsd-current@FreeBSD.ORG>; Thu, 30 Jan 2003 12:52:36 -0800 (PST)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7AFE143F79
	for <freebsd-current@FreeBSD.ORG>; Thu, 30 Jan 2003 12:52:35 -0800 (PST)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: from khavrinen.lcs.mit.edu (localhost [IPv6:::1])
	by khavrinen.lcs.mit.edu (8.12.6/8.12.6) with ESMTP id h0UKqWbs008955
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=OK);
	Thu, 30 Jan 2003 15:52:32 -0500 (EST)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.12.6/8.12.6/Submit) id h0UKqW6m008952;
	Thu, 30 Jan 2003 15:52:32 -0500 (EST)
	(envelope-from wollman)
Date: Thu, 30 Jan 2003 15:52:32 -0500 (EST)
From: Garrett Wollman <wollman@lcs.mit.edu>
Message-Id: <200301302052.h0UKqW6m008952@khavrinen.lcs.mit.edu>
To: Kirk McKusick <mckusick@beastie.mckusick.com>
Cc: Current <freebsd-current@FreeBSD.ORG>
Subject: Re: dump -L and privilege 
In-Reply-To: <200301300217.h0U2HVFL015158@beastie.mckusick.com>
References: <7miswoocye.wl@black.imgsrc.co.jp>
	<200301300217.h0U2HVFL015158@beastie.mckusick.com>
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-current.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-current>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-current>
X-Loop: FreeBSD.ORG

<<On Wed, 29 Jan 2003 18:17:31 -0800, Kirk McKusick <mckusick@beastie.mckusick.com> said:

> The other alternative would be to
> create a setuid-to-root program that would take a snapshot and
> chown it to the user that does dumps.

I think this would actually be a useful feature for more than just
dumps.  I might want to allow some users (say, those in group
`operator') to be able to create snapshots on their own, without
allowing arbitrary mounting privileges.

-GAWollman


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message