Is there a reason we do not turn on the file system hardlink/symlink protection in Rawhide?
Daniel J Walsh
dwalsh at redhat.com
Wed Mar 13 19:00:04 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 03/13/2013 02:55 PM, seth vidal wrote:
> On Wed, 13 Mar 2013 14:52:37 -0400 Daniel J Walsh <dwalsh at redhat.com>
> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>
>> sysctl -a | grep protected fs.protected_hardlinks = 0
>> fs.protected_symlinks = 0
>
>
> I apologize for the ignorance - but what do these _do_.
>
> (please don't say they protect your hardlinks and symlinks) - I mean what
> does 'protected' mean in this context.
>
> thanks, -sv
>
They block a non priv user from hardlinking/softlinking to files they don't own.
ln /etc/shadow ~/myshadow
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlFAzLQACgkQrlYvE4MpobNe7ACePSXtDJP5dZzgcVk6gma0HOis
ZJEAnjRO9qcsiIeCriJOAaKku2UrQCWq
=dp1F
-----END PGP SIGNATURE-----
More information about the devel
mailing list