Messages in this thread | | | Date | Thu, 28 Apr 2005 10:24:44 +0200 | From | Pavel Machek <> | Subject | Re: [PATCH] private mounts |
| |
On St 27-04-05 19:21:56, Trond Myklebust wrote: > on den 27.04.2005 Klokka 16:58 (+0200) skreiv Pavel Machek: > > > > > > > And b) is _the_ most important feature IMO, so the argument for > > > stripping it out has to be very good. > > > > Well, you'll have problems with suid programs suddenly not being able > > to access files. nfs gets away with it, but nfs is perceived as > > "broken" anyway... > > Really? > > The NFS security model is based on the principle that the administrator > of the SERVER can override access permissions on his/her hardware. Pray > tell why you think that is "broken"?
Well, administrator on CLIENT can impersonate whoever he wants, and if data happens to be cached, he can just read them from local memory. So whatever SERVER administrator does, CLIENT administrator can work around. Pavel -- Boycott Kodak -- for their patent abuse against Java. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |