Messages in this thread | | | Date | Fri, 11 Jun 1999 16:29:24 +1000 | From | Richard Gooch <> | Subject | Re: VFAT Naming Bugs |
| |
Gordon Chaffee writes: > Jeff Merkey <jmerkey@timpanogas.com> writes: > > 1. The names PIPE, $CLOCK, and NETQ are reserved as special device file > > names for some versions of DOS and Win95 and can get folks into trouble > > if you allow linux to create these names. > > You can create CLOCK$ and NETQ on Windows NT, so by your definition, > folks can get into trouble from NT to. Maybe we should just make it > illegal to write any filename to the vfat filesystem and make it > safe for everyone.
Actually, because of the lack of permission checks in VFAT, there is a gaping security threat. So, in the best interests of the user, we should overwrite the VFAT FS with zeros at mount and unmount time. And at other random times just to be sure.
Regards,
Richard....
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |