Protection from the dreaded "rm -fr /"

Giorgos Keramidas keramida at freebsd.org
Sat Oct 2 16:28:49 PDT 2004


On 2004-10-02 17:22, Garance A Drosihn <drosih at rpi.edu> wrote:
> At 8:57 PM +0300 10/2/04, Giorgos Keramidas wrote:
> >On 2004-10-02 21:23, Lee Harr <missive at hotmail.com> wrote:
> >> How about:
> >> chflags sunlnk /
> >> ?
> >
> >Setting sunlink on / will only protect the / directory, not its
> >descendants, so you don't gain much.
>
> We could add a new flag "srunlnk", or maybe even "srm-r".  The "rm"
> command will always have to stat() the file it is given (just to
> see if it is a directory), so it could check to see if this flag
> is turned on.  If it is turned on, then 'rm' could refuse to honor
> any '-rf' request on that directory. [...]

Hmmm.  This sounds much better indeed :-)



More information about the freebsd-hackers mailing list