lkml.org 
[lkml]   [2005]   [Jun]   [17]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [patch] inotify, improved.
From
Date
On Fri, 17 Jun 2005 11:44:38 EDT, Robert Love said:
> I have been hesitant, though. I do not want feature creep to be a
> deterrent to acceptance into the Linux kernel. I also think that there
> could be arguments about security. Sending the event is one thing,
> telling which pid (and thus what user, etc.) caused the event is
> another. For example, we can make the argument that read rights on a
> file are tantamount to the right to receive a read event. But can we
> say that read rights are enough for a unprivileged user to know that
> root at pid 820 is writing the file? I don't know.

It's also racy as hell. By the time the inotify gets delivered to the
userspace process, pid 820 may be long gone.....
[unhandled content-type:application/pgp-signature]
\
 
 \ /
  Last update: 2005-06-17 18:15    [W:0.086 / U:0.460 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site