Date: Wed, 7 Jan 2004 15:34:56 -0500 (EST) From: Robert Watson <rwatson@freebsd.org> To: Peter Pentchev <roam@ringlet.net> Cc: Jaroslaw Nozderko <jarek@eko.net.pl> Subject: Re: Questions about MAC Message-ID: <Pine.NEB.3.96L.1040107153355.6025E-100000@fledge.watson.org> In-Reply-To: <20040105072833.GA691@straylight.m.ringlet.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 5 Jan 2004, Peter Pentchev wrote: > The 'sudo echo blah >> foo' command does not succeed, since the > redirection is attempted by my own shell still running as my own > account, 'roam', which does not have write access to the new file; only > the 'echo blah' command is executed with root privileges. The next > attempt, executing a shell to perform the redirection, succeeds. FYI, sudo hasn't been modified to set MAC labels, so if you do use sudo, use it carefully. It might make sense to stick sudo in the base tree someday (Apple does this with Darwin), and if so, it would be ripe for the picking when it comes to adding MAC support. Your diagnosis of the redirect running with the wrong label sounds correct to me, also FYI. :-) Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Senior Research Scientist, McAfee Research
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96L.1040107153355.6025E-100000>