Subject: Re: forbidding rm -rf /
To: Greywolf <greywolf@starwolf.com>
From: Christos Zoulas <christos@zoulas.com>
List: tech-userlevel
Date: 10/05/2004 20:34:52
On Oct 5,  5:10pm, greywolf@starwolf.com (Greywolf) wrote:
-- Subject: Re: forbidding rm -rf /

| [Thus spake Hubert Feyrer ("HF: ") Tomorrow...]
| 
| HF: On Tue, 5 Oct 2004, Christos Zoulas wrote:
| HF: >> Solaris 10 doesn't allow "rm -rf /" -- should we do the same?
| HF: > What next? Forbidding 'cd / && rm -rf *'?
| HF:
| HF: I wonder if we could give some systrace examples for that...
| HF:
| HF:
| HF:   - Hubert
| 
| This ranks right up there with their escapades into SunOS 4 in which
| if any of libc.so*, ld.so, or /dev/zero disappeared, most programs
| would stop working, as most of them were dynamically linked.  No,
| I've already ranted on dynalinking in /bin and /sbin, so I won't
| do it here.
| 
| But if you lose /dev/zero through a mistake, and mknod lived in /usr/sbin,
| and /usr/sbin/mknod was dynamically linked, well...
| 
| [Yes, I commented on that in the blog.  What a mind-numbingly STUPID
| pretense for a hack.]

Actually there is /usr/lib/0@0.so.1 which beats all of them.

christos