Re: [9fans] fossil permission checking

[Uriel <uriel99@gmail.com>]

There is no 'super-user' in Plan 9, bootes is (for the most part) a
user like any other, that just happens to be the owner of most kernel
file servers. It has no special privileges, in Plan 9 there is nothing
like root that lets you ignore file permissions and so on, the kernel
applies the same rules to everyone.

This is one of the things that were badly broken in the Unix security
model and was fixed in Plan 9. I specially recommend reading the
'Security in Plan 9' paper.

Peace

uriel

On Thu, Aug 7, 2008 at 3:01 AM, Benjamin Huntsman
<BHuntsman@mail2.cu-portland.edu> wrote:
>>i believe new directories in / are frowned upon
>
> Understood, though 'bootes' or whoever has superuser-like permissions should still have unlimited abilities, right?
> Or is this purely a function of the flags to mount the root?  On a side-note though, what is the preferred UNIX equivalent of /usr/local or /usr2?
>
> However, permissions are still wrong somewhere, as I can't:
>   cp /adm/timezone/US_Pacific /adm/timezone/local
> per the last part of the installation instructions, which also yields a permission denied message, even while logged in under the 'out-of-the-box' user glenda.
>
> Thanks again!
>
>
> -----Original Message-----
> From: 9fans-bounces@9fans.net on behalf of andrey mirtchovski
> Sent: Wed 8/6/2008 5:24 PM
> To: Fans of the OS Plan 9 from Bell Labs
> Subject: Re: [9fans] fossil permission checking
>
> / is indeed mounted without -c. if you want to create a directory in /
> use /root. see 'nm' for how the namespace is constructed.
>
> i believe new directories in / are frowned upon (even if created in
> /root). i can't find the relevant message in the archives.
>
> On Wed, Aug 6, 2008 at 6:10 PM, Benjamin Huntsman
> <BHuntsman@mail2.cu-portland.edu> wrote:
>> I'm having some trouble setting up a terminal (which will become a cpu/auth server).
>> I've gotten the 9pccpuf kernel booted, and is running as the user bootes, but even from the server's console, if I type something as simple as "echo hi > /foo" I receive the message:
>>
>> mounted directory forbids creation
>>
>> I've basically followed the wiki pages on setting up a standalone auth/cpu server, though it's not getting me very far on the fossil side of things...  I chose all of the defaults during the install process,
>>
>> Can someone give me a quick tip as to how to set up a new cpu/fossil user that can actually write to something other than their home directory?
>>
>> Also, there's not exactly a command like UNIX's sudo, is there?
>>
>> Thanks in advance!
>>
>>
>
>
>