From owner-freebsd-stable Mon Mar 12 15: 7:22 2001 Delivered-To: freebsd-stable@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-59.dsl.lsan03.pacbell.net [63.207.60.59]) by hub.freebsd.org (Postfix) with ESMTP id BB9AD37B718 for ; Mon, 12 Mar 2001 15:07:17 -0800 (PST) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 5C32566B6C; Mon, 12 Mar 2001 15:07:17 -0800 (PST) Date: Mon, 12 Mar 2001 15:07:17 -0800 From: Kris Kennaway To: Steve Tremblett Cc: Jan Grant , freebsd-stable Subject: Re: nullfs et al Message-ID: <20010312150717.F93848@mollari.cthul.hu> References: <200103121502.KAA25352@sjt-u10.cisco.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="lteA1dqeVaWQ9QQl" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200103121502.KAA25352@sjt-u10.cisco.com>; from sjt@cisco.com on Mon, Mar 12, 2001 at 10:02:54AM -0500 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --lteA1dqeVaWQ9QQl Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Mar 12, 2001 at 10:02:54AM -0500, Steve Tremblett wrote: > my mistake - I used this before on another OS. I have not tried this > on FreeBSD, so I can't attest to how it works. On the system I did use > it on, the absolute symlinks were interpreted relative to the REAL /, > and the user only saw a regular file as opposed to the link. Wow, that sounds like a massive security hole. Which OS was it? Kris --lteA1dqeVaWQ9QQl Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6rValWry0BWjoQKURAgEnAJ9P5TRyVehdU4moZ7AnL+8LeZX6PgCfeqdA Geq5pDsGo1kt/rUF+zcylXE= =JSCS -----END PGP SIGNATURE----- --lteA1dqeVaWQ9QQl-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message