Date: Sat, 02 Oct 2004 20:06:45 -0600 (MDT) From: "M. Warner Losh" <imp@bsdimp.com> To: keramida@freebsd.org Cc: freebsd-hackers@freebsd.org Subject: Re: Protection from the dreaded "rm -fr /" Message-ID: <20041002.200645.21077766.imp@bsdimp.com> In-Reply-To: <20041003015321.GA3190@gothmog.gr> References: <20041002210554.GS35869@seekingfire.com> <20041002.192951.35870461.imp@bsdimp.com> <20041003015321.GA3190@gothmog.gr>
next in thread | previous in thread | raw e-mail | index | archive | help
In message: <20041003015321.GA3190@gothmog.gr>
Giorgos Keramidas <keramida@freebsd.org> writes:
: On 2004-10-02 19:29, "M. Warner Losh" <imp@bsdimp.com> wrote:
: > In message: <20041002210554.GS35869@seekingfire.com>
: > Tillman Hodgson <tillman@seekingfire.com> writes:
: > : It'll never work, though, that's the thing. At some point it'll rm
: > : something it itself needs and error out. There isn't a way to use `rm
: > : -rf /` that /doesn't/ result in foot-shooting.
: >
: > No. You are wrong. if you rm -rf in a chroot, then it won't result
: > in foot shooting, necessarily, like it would outside a chroot.
:
: Since a chroot can always be rm -fr deleted from outside the chroot,
: this isn't really a great problem, is it?
You miss the point.
You said it was always a foot-shooting move. I gave you a concrete
example of where it wasn't a foot-shooting move (or even when you
could use newfs instead). You reply with a workaround (which may be a
valid way to deal, maybe not). My point still stands: it isn't always
a foot-shooting move.
It isn't a valid work around if you want to delete the chroot from
inside the chroot...
Warner
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041002.200645.21077766.imp>