Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #52269

Re: no permission as root?

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Ok,
how can I disable it, can it be configured in /sys ?
Can't find it in any manpage. It should be documented somewhere!
It is helpful for nfs (or other remote access), but not local. If root 
already, there's no difference.
I say best would be a mount-option.

Andrew


On 2016-01-19 21:50, Julien Cristau wrote:
> Ah, right. That is the "protected symlinks" hardening feature.
>
> Cheers,
> Julien
>
> On January 19, 2016 9:36:50 PM CET, Die Optimisten 
> <inform@die-optimisten.net> wrote:
>
>     On 2016-01-19 20:06, Julien Cristau wrote:
>>     On Tue, Jan 19, 2016 at 19:44:26 +0100, Die Optimisten wrote:
>>
>>>     Hi
>>>     I#m using/normal Debian, without virtualization, etc/
>>>     Why do I have access as user, but not as root????
>>>
>>     google for nfs root squash.
>>
>>     Cheers,
>>     Julien
>     Hi Julien,
>     Its local, without NFS!  (rootfs  ext2, mounted without acl,
>     xattr, etc  )
>     Furthermore, if a user created the link, other users can't follow it,
>     other users can follow only, if created by root.
>
>     test@PcDach:/tmp/BB$ dir RR
>     lrwxrwxrwx 1 andreas andreas 39 Jan 19 21:25 RR -> /RRR/
>     test@PcDach:/tmp/BB$ dir RR/
>     ls: cannot access RR/: Permission denied
>     test@PcDach:/tmp/BB$
>     test@PcDach:/tmp/BB$ dir /RRR/    # shows all
>     total 82048
>     drwxrwxrwx  3 andreas test       4096 Jan 19 19:04 .
>     drwxrwxrwx  59 root    test      12288 Jan 15 17:10 ..
>     ...
>
>     Andrew
>

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

no permission as root? Die Optimisten <inform@die-optimisten.net> - 2016-01-19 20:10 +0100
  Re: no permission as root? Julien Cristau <jcristau@debian.org> - 2016-01-19 20:10 +0100
    Re: no permission as root? Ben Hutchings <ben@decadent.org.uk> - 2016-01-19 20:30 +0100
    Re: no permission as root? Die Optimisten <inform@die-optimisten.net> - 2016-01-19 22:00 +0100
      Re: no permission as root? Julien Cristau <jcristau@debian.org> - 2016-01-19 22:00 +0100
        Re: no permission as root? Die Optimisten <inform@die-optimisten.net> - 2016-01-19 22:30 +0100
          Re: no permission as root? Ben Hutchings <ben@decadent.org.uk> - 2016-01-19 23:50 +0100

csiph-web