Call for review: restricted hardlinks.

[Pawel Jakub Dawidek]

Hi.

I've no response from so@ in this topic, probably because leak of time,
so I'll try here.

Here is a patch that I'm planing to commit:

	http://people.freebsd.org/~pjd/patches/restricted_hardlinks.patch

It adds two new sysctls:

	security.bsd.hardlink_check_uid
	security.bsd.hardlink_check_gid

If sysctl security.bsd.hardlink_check_uid is set to 1, unprivileged users
are not permitted to create hard links to files not owned by them.
If sysctl security.bsd.hardlink_check_gid is set to 1, unprivileged users
are not permitted to create hard links to files if they are not member
of file's group.

For now user is able to create hardlinks to any files.

-- 
Pawel Jakub Dawidek                       http://www.FreeBSD.org
pjd at FreeBSD.org                           http://garage.freebsd.pl
FreeBSD committer                         Am I Evil? Yes, I Am!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20040308/46973553/attachment.bin