[1723] in linux-security and linux-alert archive

home help back first fref pref prev next nref lref last post

[linux-security] Re: Re: Towards a solution of tmp-file problems (fwd)

daemon@ATHENA.MIT.EDU (Mario D. Santana)
Sat Mar 14 10:01:51 1998

Date: Fri, 13 Mar 1998 13:19:24 -0500 (EST)
From: "Mario D. Santana" <mario@sparc209.nin.net>
To: linux-security@redhat.com
In-Reply-To: <199803130657.RAA03244@localhost.localdomain>
Resent-From: linux-security@redhat.com
Reply-To: linux-security@redhat.com


I'm usually a lurker, but this gave me an idea. A filesystem firewall?
fsfw(4) and fsfwadm(8)...?

It could be a whole new fs but after a very quick glance, it looks like
some rearranging of fs/file_table.c would allow for a clean fs-independant
hook.

$.02,
.mario

On Fri, 13 Mar 1998, Allen Bolderoff wrote:

> (...)
> would it be possible to tell the kernel not to follow symlinks out of the /tmp 
> directory as a broad based rule?
> (...)

--
 Mario D. Santana Student Systems and Development San Francisco State
 President and CEO, El Orangutan, Ltd. Trying to make a better monkey
 Two Stupid Dogs Bert Ernie Johnny Bravo Dexter's Lab Cow and Chicken
 mario@nin.net aka santana@linux_box.sfsu.edu aka pepito@undernet.irc

-- 
----------------------------------------------------------------------
Please refer to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------

To unsubscribe: mail -s unsubscribe test-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post