Date: Mon, 8 Mar 2004 23:54:34 +0100 From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: David Malone <dwmalone@maths.tcd.ie> Cc: cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/kern vfs_syscalls.c Message-ID: <20040308225434.GQ10864@darkness.comp.waw.pl> In-Reply-To: <20040308204336.GA7261@walton.maths.tcd.ie> References: <200403082037.i28KbQ2M041691@repoman.freebsd.org> <20040308204336.GA7261@walton.maths.tcd.ie>
next in thread | previous in thread | raw e-mail | index | archive | help
--Dxzxec4+BSbG6TGA Content-Type: text/plain; charset=iso-8859-2 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Mar 08, 2004 at 08:43:36PM +0000, David Malone wrote: +> On Mon, Mar 08, 2004 at 12:37:26PM -0800, Pawel Jakub Dawidek wrote: +> > - security.bsd.hardlink_check_uid, when set, means, that unp= rivilege +> > users are not permitted to create hard links to file= s not +> > owned by them, +> > - security.bsd.hardlink_check_gid, when set, means, that unp= rivilege +> > users are not permitted to create hard links to file= s owned +> > by group they don't belong to. +>=20 +> Neat! I'd done something like this years ago, but couldn't figure +> out if this should be enforced by syscall code or filesystem code. +> I think that NFS was the main place that this made a difference, so +> I wonder if the NFS server should know about these sysctls? Hmm, because it is on syscall level it works for NFS mounted partitions. If you're talking about enforcing it on NFS server side, I don't think it really matters. --=20 Pawel Jakub Dawidek http://www.FreeBSD.org pjd@FreeBSD.org http://garage.freebsd.pl FreeBSD committer Am I Evil? Yes, I Am! --Dxzxec4+BSbG6TGA Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFATPmqForvXbEpPzQRArCaAJ9vqCTJ9TNI4OfXiIZzeH9+D9b+pgCeMnwr SIu10xxgglCohGKwwMI9wO8= =gdrg -----END PGP SIGNATURE----- --Dxzxec4+BSbG6TGA--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040308225434.GQ10864>