lkml.org 
[lkml]   [1996]   [Dec]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: QUOTA
Date
From

>In specific, userland binaries that trust what they find in /tmp are broken.
>Fixing them is a priority, and changing the way link() behaves just for that
>is a bad idea.

Just for the sake of discussion, suppose there were a special
/tmp filesystem that created (in effect) a separate /tmp directory for
each user (or, even more radically, each process group). Presumably
for this to really work properly, there would have to be some messy
hack to allow set-UID programs to access the union set of the /tmp
files of their real, effective, etc. UIDs; this brings up a potential
name collision problem, of course. Nevertheless, there ought to be
a substantial increase in system security from this relatively simple
approach.

Craig Milo Rogers

\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.024 / U:0.032 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site