Hi,

On Sat, Jul 04, 2009 at 04:05:52PM +0000, Carl Fredrik Hammar wrote:

> firmlink opens its target file with any client specified open flags,
> except O_CREAT.  This makes it is possible for a client to read or
> write to the target of a firmlink using the firmlink's authority
> (io_restrict_auth is not enough).

This could be considered a feature in some situations :-)

However, I agree that it's probably better to align the behaviour with
other kinds of links...

-antrik-


Reply via email to