Date: Sun, 5 Nov 2006 07:22:36 +0100 From: Joerg Pernfuss <elessar@bsdforen.de> To: Kostik Belousov <kostikbel@gmail.com> Cc: freebsd-hackers@freebsd.org Subject: Re: [patch] rm can have undesired side-effects Message-ID: <20061105072236.383bb353@loki.starkstrom.lan> In-Reply-To: <20061105060923.GO12108@deviant.kiev.zoral.com.ua> References: <20061029222847.GA68272@marvin.astase.com> <20061030003628.42bc5f8d@loki.starkstrom.lan> <00f201c6fbb6$0c6bd150$b3db87d4@multiplay.co.uk> <20061030024358.39a12359@loki.starkstrom.lan> <200611050222.kA52Mdm0011497@apollo.backplane.com> <20061105052832.68400a56@loki.starkstrom.lan> <20061105060923.GO12108@deviant.kiev.zoral.com.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_RXsMl_r.L4P8ssPetmQyY3+ Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sun, 5 Nov 2006 08:09:23 +0200 Kostik Belousov <kostikbel@gmail.com> wrote: > On Sun, Nov 05, 2006 at 05:28:32AM +0100, Joerg Pernfuss wrote: > > And I still have no idea why ln(1) allows links to files the user > > has no access rights whatsoever, in a directory the owner of the > > file has no access to in the first place. And what happens when I > > link the 0600 file state_secret.doc that is owned by someone else, > > into a directory I own and set SUIDDIR? Will that then be my file > > and the original owner will be denied access on his link to the > > file? (yes, kernel support required, i know. but it would be fun.) > >=20 > You could use security.bsd.hardlink_check_uid and > security.bsd.hardlink_check_gid sysctls to control this. By default, > they are disabled. Ah, thank you. Joerg --=20 | /"\ ASCII ribbon | GnuPG Key ID | e86d b753 3deb e749 6c3a | | \ / campaign against | 0xbbcaad24 | 5706 1f7d 6cfd bbca ad24 | | X HTML in email | .the next sentence is true. | | / \ and news | .the previous sentence was a lie. | --Sig_RXsMl_r.L4P8ssPetmQyY3+ Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (FreeBSD) iD8DBQFFTYMtH31s/bvKrSQRAk5BAJ0ZieSVqTmVAP2p/gZRNImY0lYD3wCfVu3f Gc1+ue1P72Eag3Beg7u5OrI= =JENK -----END PGP SIGNATURE----- --Sig_RXsMl_r.L4P8ssPetmQyY3+--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061105072236.383bb353>