From owner-freebsd-bugs@FreeBSD.ORG Mon Jun 2 10:40:05 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 03CB81065679 for ; Mon, 2 Jun 2008 10:40:05 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id ECA258FC19 for ; Mon, 2 Jun 2008 10:40:04 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m52Ae43w091720 for ; Mon, 2 Jun 2008 10:40:04 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m52Ae4FP091719; Mon, 2 Jun 2008 10:40:04 GMT (envelope-from gnats) Date: Mon, 2 Jun 2008 10:40:04 GMT Message-Id: <200806021040.m52Ae4FP091719@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org From: Bruce Evans Cc: Subject: Re: kern/122047: [ext2fs] incorrect handling of UF_IMMUTABLE / UF_APPEND, flag on EXT2FS (maybe others) X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Bruce Evans List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Jun 2008 10:40:05 -0000 The following reply was made to PR kern/122047; it has been noted by GNATS. From: Bruce Evans To: Julian Elischer Cc: Ighighi , freebsd-fs@freebsd.org, bug-followup@freebsd.org Subject: Re: kern/122047: [ext2fs] incorrect handling of UF_IMMUTABLE / UF_APPEND, flag on EXT2FS (maybe others) Date: Mon, 2 Jun 2008 20:30:02 +1000 (EST) On Mon, 2 Jun 2008, Julian Elischer wrote: > Ighighi wrote: >> On Linux, only the root user may set/clear the immutable/append flags >> on ext2 filesystems... Shouldn't FreeBSD do this too, as a POLA? > > No I think it should preserver the BSD scheme where being able to > change the immutable bits is controlled by the system secure level. > (and your UID of course). At least I think that is what I would > expect. (All file systems to behave about the same for a > particular OS. No, the securelevel already controls things, and the BSD scheme reduces to only allowing root (strictly, processes with appropriate privilege, as restricted by securelevel and jails etc, but never mere users), to change immutable bits, because ext2fs doesn't have any user immutable bits to change (except phantom bits due to bugs in the current FreeBSD implementation). Bruce