Re: Call for review: restricted hardlinks.

From: Tim Robbins (tjr_at_freebsd.org)
Date: 03/08/04

  • Next message: Georg-W. Koltermann: "Re: Call for review: restricted hardlinks." 
    Date: Mon, 8 Mar 2004 21:25:55 +1100
To: Pawel Jakub Dawidek <pjd@freebsd.org>

    On Mon, Mar 08, 2004 at 10:36:42AM +0100, Pawel Jakub Dawidek wrote:

    > Hi.
    >
    > I've no response from so@ in this topic, probably because leak of time,
    > so I'll try here.
    >
    > Here is a patch that I'm planing to commit:
    >
    > http://people.freebsd.org/~pjd/patches/restricted_hardlinks.patch
    >
    > It adds two new sysctls:
    >
    > security.bsd.hardlink_check_uid
    > security.bsd.hardlink_check_gid
    >
    > If sysctl security.bsd.hardlink_check_uid is set to 1, unprivileged users
    > are not permitted to create hard links to files not owned by them.
    > If sysctl security.bsd.hardlink_check_gid is set to 1, unprivileged users
    > are not permitted to create hard links to files if they are not member
    > of file's group.
    >
    > For now user is able to create hardlinks to any files.

    It might be more consistent with other UNIX access checks (e.g. vaccess())
    if having the same uid as the file was sufficient to link to it,
    without having to be a group member. I can't convince myself either way
    on this, but it's worth thinking about.

    Also be aware that as a side effect of this patch, old applications that use
    the unlink()/link()/unlink() sequence instead of the rename() system call
    may not be able to rename files they don't own.

    Tim
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Georg-W. Koltermann: "Re: Call for review: restricted hardlinks."

    Relevant Pages

    • Re: [PATCH] adding two new options to cp
      ... often) to copy trees of files/directories using hard links, so I added the gcp-ish options -a and -l. ... Patch is against 6-STABLE, but works well on 7-CURRENT as well. ... Committers willing to commit? ...
      (freebsd-hackers)
    • Re: [PATCH] adding two new options to cp (UPDATE)
      ... often) to copy trees of files/directories using hard links, so I added the gcp-ish options -a and -l. ... Patch is against 6-STABLE, but works well on 7-CURRENT as well. ...
      (freebsd-hackers)