From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <76195867b7c075504e92d249a17df2ea@orthanc.cc.titech.ac.jp> To: 9fans@cse.psu.edu Subject: Re: [9fans] remove files in /srv From: YAMANASHI Takeshi <9.nashi@gmail.com> Date: Tue, 1 Feb 2005 12:48:10 +0900 MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Topicbox-Message-UUID: 3b58cf84-eace-11e9-9e20-41e7f4b1d025 On Tue Feb 1 12:21:37 JST 2005, arisawa@ar.aichi-u.ac.jp wrote: > >Anyone can replace files in /srv. Bad things won't > >happen if /srv/boot has been replaced by a malicious user? : > su# rm boot > rm: boot: permission denied oops. you can surely remove /srv/dns though. what's the difference between boot and dns...? I got it: #s is doing a special treatment for boot in /sys/src/9/port/devsrv.c:/^srvremove . if(strcmp(sp->name, "boot") == 0) error(Eperm); I'd rather have #s only removable by hostowner/file owner instead. Would this change break something? --