lkml.org 
[lkml]   [1997]   [Feb]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: NFS bug ?!
Date
> Two points.  One: NFS's fundamental security flaws have been known for
> quite some time. Two: your example is silly, because root could
> also access USER's files by su'ing to USER.

I didn't say that this is a security issue. obviously root can SUID "user" to
access user's files.


I would like to

- know what's the reason and idea that this open() call succeeds for root

- avoid corrupt/incomplete data if root tries to copy such files!
either the file should be accessible and copies entirely or not at all IMHO.



Harald
--
All SCSI disks will from now on ___ _____
be required to send an email notice 0--,| /OOOOOOO\
24 hours prior to complete hardware failure! <_/ / /OOOOOOOOOOO\
\ \/OOOOOOOOOOOOOOO\
\ OOOOOOOOOOOOOOOOO|//
Harald Koenig, \/\/\/\/\/\/\/\/\/
Inst.f.Theoret.Astrophysik // / \\ \
koenig@tat.physik.uni-tuebingen.de ^^^^^ ^^^^^

\
 
 \ /
  Last update: 2005-03-22 13:39    [W:2.867 / U:0.088 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site