Date: Mon, 12 Mar 2001 15:07:17 -0800 From: Kris Kennaway <kris@obsecurity.org> To: Steve Tremblett <sjt@cisco.com> Cc: Jan Grant <Jan.Grant@bristol.ac.uk>, freebsd-stable <freebsd-stable@FreeBSD.ORG> Subject: Re: nullfs et al Message-ID: <20010312150717.F93848@mollari.cthul.hu> In-Reply-To: <200103121502.KAA25352@sjt-u10.cisco.com>; from sjt@cisco.com on Mon, Mar 12, 2001 at 10:02:54AM -0500 References: <Pine.GSO.4.31.0103121440330.26600-100000@mail.ilrt.bris.ac.uk> <200103121502.KAA25352@sjt-u10.cisco.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--lteA1dqeVaWQ9QQl Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Mar 12, 2001 at 10:02:54AM -0500, Steve Tremblett wrote: > my mistake - I used this before on another OS. I have not tried this > on FreeBSD, so I can't attest to how it works. On the system I did use > it on, the absolute symlinks were interpreted relative to the REAL /, > and the user only saw a regular file as opposed to the link. Wow, that sounds like a massive security hole. Which OS was it? Kris --lteA1dqeVaWQ9QQl Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6rValWry0BWjoQKURAgEnAJ9P5TRyVehdU4moZ7AnL+8LeZX6PgCfeqdA Geq5pDsGo1kt/rUF+zcylXE= =JSCS -----END PGP SIGNATURE----- --lteA1dqeVaWQ9QQl-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010312150717.F93848>