From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org
X-Spam-Level: ***
X-Spam-Status: No, score=3.6 required=5.0 tests=RCVD_IN_SBL_CSS autolearn=no
	autolearn_force=no version=3.4.4
Received: (qmail 31355 invoked from network); 22 Jan 2021 00:24:28 -0000
Received: from 1ess.inri.net (216.126.196.35)
  by inbox.vuxu.org with ESMTPUTF8; 22 Jan 2021 00:24:28 -0000
Received: from 5ess.inri.net ([107.191.111.177]) by 1ess; Thu Jan 21 18:55:11 -0500 2021
Received: from [127.0.0.1] ([166.170.220.211]) by 5ess; Thu Jan 21 18:55:10 -0500 2021
Date: Thu, 21 Jan 2021 18:55:09 -0500
From: Stanley Lieber <sl@stanleylieber.com>
To: 9front@9front.org
In-Reply-To: <CAHjwAuzKSsEMvLX0yW1bi_Uxe=0Ez3bMPHWB=akRqJZZR8gJ8Q@mail.gmail.com>
References: <154A2B81E5307985989F46BE958ACBAC@eigenstate.org> <e3731a6b-536f-4eeb-b4ff-99fbf4b1dd4d@sirjofri.de> <F5EE84AC-F5A1-4495-A750-F9B0B4C507A5@stanleylieber.com> <CAFSF3XMA8MW8JHzNCKzJjqi236Jm6cHB30BpMx9fs4vzMHBarw@mail.gmail.com> <84C199F8-15A4-4434-AD56-A35AB5CC6F4A@stanleylieber.com> <CAFSF3XMA3k7QQLunbbgdKpebtKdFiOqty=Ndk+2S2igOhuJwcg@mail.gmail.com> <CAFSF3XM5cYHSjQnw0q1NUB1Mp_TqCz9VDE5T1RC6xEdjH5urcA@mail.gmail.com> <CAHjwAuzKSsEMvLX0yW1bi_Uxe=0Ez3bMPHWB=akRqJZZR8gJ8Q@mail.gmail.com>
Message-ID: <8D8FC1E6-517F-4265-A250-55A8C990477C@stanleylieber.com>
MIME-Version: 1.0
Content-Type: text/plain;
 charset=utf-8
Content-Transfer-Encoding: quoted-printable
List-ID: <9front.9front.org>
List-Help: <http://lists.9front.org>
X-Glyph: ➈
X-Bullshit: extended generic firewall SVG over YAML rails core layer 
Subject: Re: [9front] user none: cwfs vs hjfs
Reply-To: 9front@9front.org
Precedence: bulk

On January 21, 2021 6:26:27 PM EST, Silas McCroskey <inkswinc@gmail=2Ecom> =
wrote:
>>  right now, running as user none is the only way to mask proc and other=
 # file system data=2E
>
>How so?
>
>RFNOMNT   If set, subsequent mounts into the new name space
>                    and dereferencing of pathnames starting with # are
>                    disallowed=2E
>
>- sam-d
>

let's stipulate i don't know what i'm talking about=2E

when i brought this up with cinap and ori on irc they agreed there is a bi=
t of a problem here=2E maybe we're all wrong, or maybe i misunderstood thei=
r confirmation of my observations=2E

observed: hjfs handles user none differently=2E

observed: as a regular user i was able to access # after rfork m=2E

i'll bow out pending this getting swept under the rug again=2E

sl