Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Oct 2006 20:00:54 +1100
From:      Peter Jeremy <peterjeremy@optushome.com.au>
To:        Xin LI <delphij@freebsd.org>
Cc:        cvs-src@freebsd.org, src-committers@freebsd.org, cvs-all@freebsd.org
Subject:   Re: cvs commit: src/bin/rm rm.1 rm.c
Message-ID:  <20061030090054.GC871@turion.vk2pj.dyndns.org>
In-Reply-To: <200610300332.k9U3W9xF099044@repoman.freebsd.org>
References:  <200610300332.k9U3W9xF099044@repoman.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--uXxzq0nDebZQVNAZ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, 2006-Oct-30 03:32:09 +0000, Xin LI wrote:
>  Be more reasonable when overwrite mode is specified while there
>  is hard links.  Overwritting when links > 1 would cause data
>  loss, which is usually undesired.

Another way of looking at it is that not overwriting when links > 1
means that the data I thought I securely deleted is still present
somewhere on my computer and I have no easy way to find it.

I believe that this change creates a security hole and should be
reverted.  It the user specified '-P', either the file should be
over-written or the file should be left untouched (not deleted).
This is the only way that the user can be protected both against
accidently over-writing a wanted file when an unwanted link is
removed and failing to over-write an unwanted file which had a
stray additional link.

--=20
Peter Jeremy

--uXxzq0nDebZQVNAZ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)

iD8DBQFFRb9G/opHv/APuIcRAo3rAKCBE2IND6ph5BUUlm43nT0IG/QRogCgs1ch
dEapV3AbUbXuapXLQZprZp8=
=0k0X
-----END PGP SIGNATURE-----

--uXxzq0nDebZQVNAZ--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061030090054.GC871>