Is there a reason we do not turn on the file system hardlink/symlink protection in Rawhide?

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/13/2013 02:55 PM, seth vidal wrote:
> On Wed, 13 Mar 2013 14:52:37 -0400 Daniel J Walsh <dwalsh at redhat.com>
> wrote:
> 
>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> 
>> sysctl -a | grep protected fs.protected_hardlinks = 0 
>> fs.protected_symlinks = 0
> 
> 
> I apologize for the ignorance - but what do these _do_.
> 
> (please don't say they protect your hardlinks and symlinks) - I mean what
> does 'protected' mean in this context.
> 
> thanks, -sv
> 

They block a non priv user from hardlinking/softlinking to files they don't own.

ln /etc/shadow ~/myshadow

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlFAzLQACgkQrlYvE4MpobNe7ACePSXtDJP5dZzgcVk6gma0HOis
ZJEAnjRO9qcsiIeCriJOAaKku2UrQCWq
=dp1F
-----END PGP SIGNATURE-----