From owner-cvs-all Mon Jun 24 16:28:31 2002 Delivered-To: cvs-all@freebsd.org Received: from chiark.greenend.org.uk (chiark.greenend.org.uk [212.135.138.206]) by hub.freebsd.org (Postfix) with ESMTP id 1F60F37B401; Mon, 24 Jun 2002 16:28:26 -0700 (PDT) Received: from fanf by chiark.greenend.org.uk with local (Exim 3.12 #1) id 17MdFx-0000j1-00 (Debian); Tue, 25 Jun 2002 00:28:25 +0100 Date: Tue, 25 Jun 2002 00:28:25 +0100 From: Tony Finch To: Sheldon Hearn Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc/mtree BSD.var.dist Message-ID: <20020625002825.C30678@chiark.greenend.org.uk> References: <200206241831.g5OIVlo87026@freefall.freebsd.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200206241831.g5OIVlo87026@freefall.freebsd.org>; from sheldonh@FreeBSD.org on Mon, Jun 24, 2002 at 11:31:47AM -0700 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jun 24, 2002 at 11:31:47AM -0700, Sheldon Hearn wrote: > > The previous delta introduced /var/empty, for use by openssh-portable, > which needs an empty directory into which to chroot(2). > > Hint to the operator that this directory really _should_ be empty > by creating it with mode 0555 and the system immutable flag (schg) > set. I should probably take this up with the openssh people rather than here, but wouldn't it be easier if sshd created its own empty directory on demand at each invocation, rather than relying on careful system development and administration? Tony. -- f.a.n.finch http://dotat.at/ BISCAY: NORTH OR NORTHEAST 4 OR 5, OCCASIONALLY 6 IN SOUTH. FAIR. MODERATE OR GOOD. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message