Re: jail and chflags [patch]

From: Pawel Jakub Dawidek <pjd_at_FreeBSD.org>
Date: Sat, 15 May 2004 22:04:01 +0200
On Sat, May 15, 2004 at 07:52:15PM +0200, Pawel Jakub Dawidek wrote:
+> On Fri, May 14, 2004 at 05:25:16PM -0700, Julian Elischer wrote:
+> +> in fact experimentation in -current shows this to be correct..
+> +> in a jail:
+> +> 
+> +> xxx#  chflags noschg libthr.so.1
+> +> xxx# ls -lo libthr.so.1
+> +> -r--r--r--  1 root  wheel  - 611568 May 15 00:02 libthr.so.1
+> +> xxx# chflags schg libthr.so.1
+> +> xxx# ls -lo libthr.so.1
+> +> -r--r--r--  1 root  wheel  schg 611568 May 15 00:02 libthr.so.1
+> +> xxx#  
+> +> 
+> +> comments? yeahs? neys?
+> 
+> Whoa! This looks very serious.

Ok, false alarm:) After discussion with rwatson_at_ and cperciva_at_, it looks
that changing those flags is permitted due to per-jail securelevels,
which were intruduced in 5.x.

-- 
Pawel Jakub Dawidek                       http://www.FreeBSD.org
pjd_at_FreeBSD.org                           http://garage.freebsd.pl
FreeBSD committer                         Am I Evil? Yes, I Am!

Received on Sat May 15 2004 - 11:04:06 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:54 UTC