From owner-freebsd-bugs@FreeBSD.ORG  Thu May 12 17:10:07 2005
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0D82016A4E8
	for <freebsd-bugs@hub.freebsd.org>;
	Thu, 12 May 2005 17:10:07 +0000 (GMT)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EDE5B43D7C
	for <freebsd-bugs@hub.freebsd.org>;
	Thu, 12 May 2005 17:10:06 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j4CHA6st034011
	for <freebsd-bugs@freefall.freebsd.org>; Thu, 12 May 2005 17:10:06 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j4CHA6V4034010;
	Thu, 12 May 2005 17:10:06 GMT
	(envelope-from gnats)
Date: Thu, 12 May 2005 17:10:06 GMT
Message-Id: <200505121710.j4CHA6V4034010@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
From: aeonflux <aeonflux@aeonflux.no-ip.com>
Subject: Re: conf/80907: tmpmfs default change
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: aeonflux <aeonflux@aeonflux.no-ip.com>
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 12 May 2005 17:10:07 -0000

The following reply was made to PR conf/80907; it has been noted by GNATS.

From: aeonflux <aeonflux@aeonflux.no-ip.com>
To: Giorgos Keramidas <keramida@freebsd.org>
Cc: bug-followup@freebsd.org
Subject: Re: conf/80907: tmpmfs default change
Date: Thu, 12 May 2005 14:03:28 -0300

 On May 12, 2005 09:59 am, Giorgos Keramidas wrote:
 > On 2005-05-11 17:38, Caitlen <aeonflux@aeonflux.no-ip.com> wrote:
 > > by default
 > > tmpmfs_flags="-S"
 > > When in reality
 > > tmpmfs_flags="-S -o nosymfollow,nosuid"
 > >
 > > would be much safer
 >
 > I don't think this is really a bug, but anyway.  It would probably be
 > safer to use:
 >
 > 	tmpmfs_flags="-S -o noatime,noexec,nosuid,nosymfollow"
 >
 > The ability to actually *use* whatever options are best for your system
 > is exactly why I made the original change to rc.d/tmp, but I'm not sure
 > if it would be good to enforce so strict permissions to everyone :-/
 Good point, but I do think a nosymfollow is a good default.  There's really no 
 reason to allow /tmp symlink race conditions to happen.  SInce it's a memory 
 fs, disabling atime doesn't really make a big difference.
 
 Anyways just a suggestion, I'll be definitely setting nosymfollow on my 
 machine here.