Date: Fri, 3 Jul 1998 06:28:16 -0400 From: "Allen Smith" <easmith@beatrice.rutgers.edu> To: sthaug@nethelp.no, lada@pc8811.gud.siemens.at Cc: hackers@FreeBSD.ORG Subject: Re: Variant Link implementation, continued Message-ID: <9807030628.ZM9030@beatrice.rutgers.edu> In-Reply-To: sthaug@nethelp.no "Re: Variant Link implementation, continued" (Jul 3, 12:11pm) References: <XFMail.980703105306.lada@pc8811.gud.siemens.at> <20545.899460699@verdi.nethelp.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Jul 3, 12:11pm, sthaug@nethelp.no (possibly) wrote: > If anybody should ever consider something similar to HP-UX CDFs, I'd > strongly suggest that this should only be available to root by default. > (on the assumption that root users know what they're doing). > > At one of my former employers we had a large number of HP-UX diskless > hosts, using CDFs. We saw far too many cases of users inadvertently > having their directories "disappear" (and similar problems) because > they had turned the CDF bit on. It was a real support hassle. Another reason to have this limit is to prevent people from hiding files using it from various security checking tools; see Garfinkel & Spafford's _Practical Unix & Internet Security_, pages 136-137. (To give you some idea, it's under "Oddities and Dubious Ideas" for a reason.) -Allen -- Allen Smith easmith@beatrice.rutgers.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9807030628.ZM9030>