tech-security archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

re: open()ing a directory without O_DIRECTORY

On Mar 4,  8:47am, matthew green wrote:
} >  - zero out on unlink() so that the data is no longer on the disk
} >    (Everybody seems to have expressed preference for this solution but I
} >    think this requires changing all the affected filesystems)
} actually, i don't like this idea at all.  it requires additional
} writes and it makes crash handling much harder later.  eg, fsdb
} will have much less useful data to work from.

     Where's the additional write?  You have to modify the directory
entry anyways to show that it is deleted.

} i really don't think it is worth making hard times harder.
}-- End of excerpt from matthew green

Home | Main Index | Thread Index | Old Index