[lkml]   [1996]   [Jun]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: pre2.0.9 (was Re: CD-ROM Access Crashes)
In, article <>,
Craig Milo Rogers <> writes:
> >No, we actually _have_ to call readpage regardless of any old
> >error-status, because the error might go away (maybe the error was due to
> >protection problems with the previous user, but now we're another person
> >so..).
> I am confused by the statement above. Does it imply that its
> converse might be true: that a user might successfully access a page
> (read and cached by a prior user) that they would have been prevented
> from reading had readpage been called?

Well, yes, actually, but only if you're root and first try the access as
a normal user. This is not a security hole because if the remote file is
owned by root, this wouldn't help you, and if it isn't, there's nobody to
prevent you from locally setuid()ing yourself to the file's owner in the
first place.

The NFS no-root-allowed feature really doesn't prevent accessing files as
root, it just makes root from A and B be a different user.

Unfortunately, Linux itself doesn't know anything about that, hence these

Effectively, thus, no. ;-)

Small Earthquake in Chile;
Not Many Killed
-- Healing suggested for The Times of London by Claud Cockburn
Matthias Urlichs

 \ /
  Last update: 2005-03-22 13:37    [W:0.041 / U:5.580 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site