lkml.org 
[lkml]   [1997]   [Dec]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: security warning


On Tue, 16 Dec 1997, Alan Cox wrote:
>
> > I'm not sure what to suggest. While a case can be made that following
> > symlinks on hardlinking is sensible, in the delicate situations where
> > hardlinks are actually ever *used*, symlinks are typically unexpected;
> it seems best to not follow them, at least on the destination.
>
> Creation in general following a link is bad

This is easy to change (change a 1 to a 0 in the appropriate places), but
it really isn't bad - it's what most modern UNIXes will do (the "creat"
part), and it does have some advantages.

I think Linux currently allows following a symlink for just about anything
(mkdir(), link()) etc, which is partly just because it's so easy to do
with the new dentry scheme, and it is consistent. Most other unixes seem
to allow symlink following for some things (creat) but not others (mkdir).

Linus


\
 
 \ /
  Last update: 2005-03-22 13:40    [W:0.042 / U:1.844 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site