From mboxrd@z Thu Jan  1 00:00:00 1970
Message-ID: <912569f85725304c0ac33d349a74b8a3@plan9.bell-labs.com>
From: David Presotto <presotto@closedmind.org>
To: 9fans@cse.psu.edu
Subject: Re: [9fans] Copying pushtls(2)
In-Reply-To: <20030808155134.G1666@cackle.proxima.alt.za>
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Date: Fri,  8 Aug 2003 10:19:42 -0400
Topicbox-Message-UUID: 16d85d16-eacc-11e9-9e20-41e7f4b1d025

On Fri Aug  8 10:07:35 EDT 2003, lucio@proxima.alt.za wrote:
> On Fri, Aug 08, 2003 at 09:51:21AM -0400, David Presotto wrote:
> >
> > I agree that I screwed up when I copied the devsrv semantics into
> > devtls and devssl.  It's convenient but not distributable.  In
> > fact, now that I think of it, its probably a security hole since
> > exportfs doesn't really know what's going on under it and you can
> > hijack its fd's through #D, #s, and #a.
> >
> Hm, it's hard to live without #s, what does it need not to be a
> security risk?  Some rendez-vous rules like in changing the group of a
> file?

That's not the problem.  It's the fact that you can create in /srv.