[lkml]   [1999]   [Sep]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: Why is chmod(2)?
    On Thu, Sep 23, 1999 at 10:32:43AM -0700, Casey Schaufler wrote:
    > Mitchell Blank Jr wrote:

    > Let's be really malicious. Since open files don't go away
    > when their unlinked, I can prevent someone from getting access
    > to their disk quotas by opening their files before they unlink them,
    > thus preventing the blocks from being freed. No matter that they
    > tried to prevent me from doing this by setting permission bits.
    > No, a file with mode 000 (---------- for you young'uns) ought not
    > be openable by unprivileged users, period.

    Good point. Similar problems have always existed with quotas except
    when each user has their own partition (or others could create
    additional hardlinks to files so that the owner has no chance to
    unlink them), which is why I always considered quotas a kludge, but
    allowing open()ing otherwise unaccessable files would even prevent the
    second-order kludge of using individual partitions from working.

    To avoid this problem, one might decide not to use the original file
    if the user does not have any access rights to it and instead just
    create a per-process copy the relevant details of its current state,
    but then we'd miss the goal of arriving at a uniform design.
    Or one might want to allow dangling fd's: the process is allowed to
    open it, but we don't count this for the "real" link count.

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    Please read the FAQ at

     \ /
      Last update: 2005-03-22 13:54    [W:0.021 / U:0.068 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site