From owner-freebsd-security Mon Aug 30 12:14:43 1999 Delivered-To: freebsd-security@freebsd.org Received: from gndrsh.dnsmgr.net (GndRsh.dnsmgr.net [198.145.92.4]) by hub.freebsd.org (Postfix) with ESMTP id D834F15357 for ; Mon, 30 Aug 1999 12:14:38 -0700 (PDT) (envelope-from freebsd@gndrsh.dnsmgr.net) Received: (from freebsd@localhost) by gndrsh.dnsmgr.net (8.9.3/8.9.3) id MAA66330; Mon, 30 Aug 1999 12:13:04 -0700 (PDT) (envelope-from freebsd) From: "Rodney W. Grimes" Message-Id: <199908301913.MAA66330@gndrsh.dnsmgr.net> Subject: Re: Not sure if you got it... In-Reply-To: <199908301812.LAA16174@apollo.backplane.com> from Matthew Dillon at "Aug 30, 1999 11:12:05 am" To: dillon@apollo.backplane.com (Matthew Dillon) Date: Mon, 30 Aug 1999 12:13:04 -0700 (PDT) Cc: imp@village.org (Warner Losh), bde@zeta.org.au (Bruce Evans), dynamo@ime.net, security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > > :> > :> Any objections to chflags nouflags going into the tree, modulo > :> problems with the actual code that does it? > : > :I don't have a problem with that. > : > :> > :> I'd also like to have a new flag to rm. -F. One -F will be > :> chflags nouflags foo ; rm -f foo > :> while two -F will be > :> chflags 0 foo ; rm -f foo > : > :I have a problem with this, it means updating 1 more chunk of code > :should the set of items in uflags change. > : > :-- > :Rod Grimes - KD7CAX - (RWG25) rgrimes@gndrsh.dnsmgr.net > > Maybe what we need to do is allow a umask to be set for the flag bits > in the mount. So, for example, you would be able to specify which flag > bits are allowed to be set on a mount-by-mount basis (both user and > system). Otherwise we may wind up spending the next year trying to > 'fix' security holes in scripts related to the flag bits. Hummmm.. or add a flag bit that says flags can't be set below this directory level? Domain/OS can do a similiar thing with it's ACL's. Mount points are too cource grained for this problem, /var/tmp is often just a part of /var. I might want append only flags on much of /var/log, but disallow flags in /var/{run,tmp}. -- Rod Grimes - KD7CAX - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message