From owner-freebsd-hackers  Wed Aug 18 15:33:48 1999
Delivered-To: freebsd-hackers@freebsd.org
Received: from rover.village.org (rover.village.org [204.144.255.49])
	by hub.freebsd.org (Postfix) with ESMTP id 730DD151CA
	for <hackers@FreeBSD.ORG>; Wed, 18 Aug 1999 15:33:45 -0700 (PDT)
	(envelope-from imp@harmony.village.org)
Received: from harmony.village.org (harmony.village.org [10.0.0.6])
	by rover.village.org (8.9.3/8.9.3) with ESMTP id QAA49934;
	Wed, 18 Aug 1999 16:34:06 -0600 (MDT)
	(envelope-from imp@harmony.village.org)
Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id QAA27771; Wed, 18 Aug 1999 16:33:49 -0600 (MDT)
Message-Id: <199908182233.QAA27771@harmony.village.org>
To: David Scheidt <dscheidt@enteract.com>
Subject: Re: lpd security check for changed-file vs NFS 
Cc: Garance A Drosihn <drosih@rpi.edu>,
	Matthew Dillon <dillon@apollo.backplane.com>, hackers@FreeBSD.ORG
In-reply-to: Your message of "Wed, 18 Aug 1999 08:48:17 CDT."
		<Pine.NEB.3.96.990818084611.33224A-100000@shell-2.enteract.com> 
References: <Pine.NEB.3.96.990818084611.33224A-100000@shell-2.enteract.com>  
Date: Wed, 18 Aug 1999 16:33:49 -0600
From: Warner Losh <imp@village.org>
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

In message <Pine.NEB.3.96.990818084611.33224A-100000@shell-2.enteract.com> David Scheidt writes:
: Couldn't you turn it off only for NFS mounted files?  

For the general case (eg the code checked into the system), the check
needs to remain enabled.  Anything else is insecure.

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message