Date: Mon, 8 Apr 2002 23:41:37 +0200 From: =?ISO-8859-2?Q?Pawe=B3_Jakub_Dawidek?= <nick@garage.freebsd.pl> To: freebsd-hackers@FreeBSD.org Subject: Re: Hardlinks... Message-ID: <20020408234137.D5952@garage.freebsd.pl> In-Reply-To: <200204081841.g38Ifi104580@mass.dis.org>; from msmith@FreeBSD.ORG on Mon, Apr 08, 2002 at 11:41:44AM -0700 References: <20020408113423.Y81506-100000@resnet.uoregon.edu> <200204081841.g38Ifi104580@mass.dis.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--zS7rBR6csb6tI2e1
Content-Type: text/plain; charset=ISO-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Mon, Apr 08, 2002 at 11:41:44AM -0700, Michael Smith wrote:
+> You could also use this technique to maliciously exhaust a user's quota,=
=20
+> by linking to their temporary files. I'm not sure what the standards=20
+> have to say about this, but I don't much like the current behaviour.
+>=20
Yes. And look on this part of foldinfo.c from procmail:
{ if(stbuf.st_uid!=3Duid|| /* recipient not ow=
ner */
!(stbuf.st_mode&S_IWUSR)|| /* recipient can write=
? */
S_ISLNK(stbuf.st_mode)|| /* no symbolic link=
s */
(S_ISDIR(stbuf.st_mode)? /* directories, yes, hardlink=
s */
!(stbuf.st_mode&S_IXUSR):stbuf.st_nlink!=3D1)) /*=
no */
/*
* If another procmail is about to create the new
* mailbox, and has just made the link, st_nlink=3D=3D2
*/
As You can see, this is not good idea to use procmail when anyone can made
a hardlink to my mailbox.
--=20
Pawe=B3 Jakub Dawidek
Network Administrator.
Am I Evil? Yes, I Am.
--zS7rBR6csb6tI2e1
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
iQCVAwUBPLIOkT/PhmMH/Mf1AQFFNwQAnWUIkdHeYRRw4WyK70Wpf/o8T9BHhkQz
lM0pFDsNBtOrBAe+8o8xoBlJk+YwlX/J0BMzACVpKQ7QFupwR0faMbEfS3wqbpKr
Wq9/T7rLzmm9HyXT4bXI75zbngqr1nCKM9zN958FvetNfymY7XllIMjxyCiPJK2L
7nIcO5Vq5l8=
=jSdM
-----END PGP SIGNATURE-----
--zS7rBR6csb6tI2e1--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020408234137.D5952>