[lkml]   [1997]   [Nov]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: knfsd and system crashes

Martin von Loewis writes:
>The Linux VFS currently offers the iget function to retrieve an inode
>when given an inode number.
>this is IMHO the route to go.
>Searching the entire volume is not an option, IMHO - at least not on
>file systems that have the clear notion of inode numbers.

I think a direct iget to retrieve the inode from the NFS file handle
is probably a good idea when all other options fail. However, I am
concerned that this may add security holes.

What is to stop an attacker from generating bogus NFS filehandles
containing inode numbers of files that would otherwise not be accessable?
At the very least, I would think a check of the parent directories'
permissions would be a good idea?

Or am I just silly in thinking that a server exporting NFS partitions
has any semblance of security?


 \ /
  Last update: 2005-03-22 13:40    [W:0.050 / U:0.120 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site