GMIRROR can be destroyed by ordinary users
Simon L. Nielsen
simon at nitro.dk
Sat Jan 8 10:54:59 PST 2005
On 2005.01.08 19:39:42 +0100, Pawel Jakub Dawidek wrote:
> On Sat, Jan 08, 2005 at 04:33:14PM +0100, Simon L. Nielsen wrote:
> +> I'm not really sure it is expected that you can do that when being in
> +> the operator group.
>
> Yes. If you want to change it you should do:
>
> # chmod 600 /dev/geom.ctl
Being in the operator group only gives read access to /dev/geom.ctl
(it's root:operator crw-r-----) so I think it's somewhat counter
intuitive that one can stop the mirror without write permission there.
Wouldn't it be better to only allow stopping the mirror (and similar)
if the user has write access to geom.ctl?
phk fixed some similar issues in some of the other GEOM classes not
long ago, e.g. geom_bsd.c v. 1.71.
--
Simon L. Nielsen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20050108/bae2be32/attachment.bin
More information about the freebsd-stable
mailing list