Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Oct 1997 19:28:51 +0100 (MET)
From:      Guido van Rooij <guido@gvr.org>
To:        tlambert@primenet.com (Terry Lambert)
Cc:        roberto@keltia.freenix.fr, freebsd-fs@FreeBSD.ORG
Subject:   Re: disabled symlinks
Message-ID:  <199710271828.TAA01989@gvr.gvr.org>
In-Reply-To: <199710271726.KAA13912@usr01.primenet.com> from Terry Lambert at "Oct 27, 97 05:26:08 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> 
> As far as "nosuid" goes, I will note that if root runs a program on
> a nosuid mounted volume, the program runs as root.  And root can also
> "suid" to any user id, and run the program, simulating an "suid" event.
> 

?? So what. That isn;t the issue here. If root runs rm -rf / things
will also break. That has nothing to do with suid.

> So if the intent is to make it act like "nosuid", then it should only
> affect creation, and being root should override the option (ie: root
> can still create symlinks).

I still think otherwise. Now that symlinks do have owners, teh
same can be achieved by only following symlinks if they are
owned by root.

-Guido



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199710271828.TAA01989>