--On Dienstag, 12. Dezember 2006 21:24 +0100 Oliver Lehmann 
<[EMAIL PROTECTED]> wrote:

> Georg Altmann wrote:
>
>> There should really be a possibility to make backups and
>> restores, without having all those policies to get in your way, instead
>> of  implementing a complicated handling scheme in every backup-software.
>> Maybe  worth a bug report for FreeBSD?
>
> But that would "bypass" the goal those flags are trying to reach,
> wouldn't it?

No, not really. You can clear the schg flag as root as you said your self. 
Why shouldn't it be possible for root to "disable" immutable flags for a 
whole tree?
Obviously for securelevel > 0 this should be prohibited. And for MAC you 
could have just another policy (JAO) for allowing this.
I'm not a kernel hacker, so I don't know if this can be implemented in some 
reasonable manner - it's just an idea...

Regards,
Georg

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to