From owner-cvs-all Sat Feb 19 18:51: 9 2000 Delivered-To: cvs-all@freebsd.org Received: from builder.freebsd.org (builder.FreeBSD.ORG [204.216.27.24]) by hub.freebsd.org (Postfix) with ESMTP id 55B8F37BDF1; Sat, 19 Feb 2000 18:51:03 -0800 (PST) (envelope-from green@FreeBSD.org) Received: from 1Cust125.tnt1.washington.dc.da.uu.net (localhost [127.0.0.1]) by builder.freebsd.org (Postfix) with ESMTP id E07B6132D6; Sat, 19 Feb 2000 18:49:55 -0800 (PST) Date: Sat, 19 Feb 2000 21:50:59 -0500 (EST) From: Brian Fundakowski Feldman X-Sender: green@green.dyndns.org To: Robert Watson Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/ufs/ufs ufs_vnops.c In-Reply-To: <200002200110.RAA94504@freefall.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk On Sat, 19 Feb 2000, Robert Watson wrote: > rwatson 2000/02/19 17:10:38 PST > > Modified files: > sys/ufs/ufs ufs_vnops.c > Log: > Disable chflags() from within jail() so that root within jail can't make > a mess in securelevel environments. Results in one warning during > /etc/rc as it attempts to remove file flags, but this is harmless. > Maybe a silly question... why isn't it disabled in a jail only when the securelevel that certain level which disables un-schging something? > Approved by: High Lord Hubbard > > Revision Changes Path > 1.130 +2 -2 src/sys/ufs/ufs/ufs_vnops.c -- Brian Fundakowski Feldman \ FreeBSD: The Power to Serve! / green@FreeBSD.org `------------------------------' To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message