Subject: Re: CRITICAL ** Holes in default cron jobs ** CRITICAL
To: der Mouse <mouse@Holo.Rodents.Montreal.QC.CA>
From: Michael Graff <explorer@flame.org>
List: tech-kern
Date: 01/02/1997 07:27:37
der Mouse <mouse@Collatz.McRCIM.McGill.EDU> writes:

> I do.  If any process has a cwd in a subdirectory of /tmp, its cwd will
> move when you do the mv, and it can then walk up the tree and play all
> the usual symlink games.

Is there any reason we can't use another file "flag" like those set with
chflags?  I know it would only be on FFS, but that would fix most of the
problems.

Baring that, it seems to me a syscall to disable symlinks for the current
process and all children would work.

--Michael