[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [bug #26960] firmlink opens target with client specified flags
From: |
Carl Fredrik Hammar |
Subject: |
Re: [bug #26960] firmlink opens target with client specified flags |
Date: |
Fri, 10 Jul 2009 19:13:05 +0200 |
User-agent: |
Mutt/1.5.18 (2008-05-17) |
On Fri, Jul 10, 2009 at 03:27:32PM +0200, olafBuddenhagen@gmx.net wrote:
> On Sat, Jul 04, 2009 at 04:05:52PM +0000, Carl Fredrik Hammar wrote:
>
> > firmlink opens its target file with any client specified open flags,
> > except O_CREAT. This makes it is possible for a client to read or
> > write to the target of a firmlink using the firmlink's authority
> > (io_restrict_auth is not enough).
>
> This could be considered a feature in some situations :-)
It definetly shouldn't be the default though. :-)
Regards,
Fredrik