Not that I would know, being a user not a developer....

> On Jun 16, 2022, at 13:33, Ravi Paluri (QUIC) <quic_rpal...@quicinc.com> 
> wrote:
> 
> Hi jo,
> 
>>> it is not the same. There is no special handling for specific overlay file 
>>> paths in procd.
>   If the behavior is not same, can you let me know how "below" is 
> handled/taken care in OpenWRT?
>   "changes made to sensitive files for e.g. /etc/passwd (deleting a line. 
> Deleting passwd file etc.) will have adverse impact on security and some init 
> scripts may not start etc."

        How can you implement user-changeable passwords without actually 
changing /etc/passwd in a way that "survives" a reboot? And similar for all 
other configuration changes that are expected by the user to be persistent... 
Yes, this probably means a user with root and or physical access to a router 
will likely be able to brick it and compromise its security (e.g. by 
unfortunate configuration changes or installation of insecure software 
packages). I guess what I am asking what is your threat model here?

Regards
        Sebastian


> 
> Thanks,
> Ravi
> 
> -----Original Message-----
> From: openwrt-devel <openwrt-devel-boun...@lists.openwrt.org> On Behalf Of 
> Jo-Philipp Wich
> Sent: Thursday, June 16, 2022 3:54 PM
> To: openwrt-devel@lists.openwrt.org
> Subject: Re: Query regd. rw rootfs
> 
> WARNING: This email originated from outside of Qualcomm. Please be wary of 
> any links or attachments, and do not enable macros.
> 
> Hi,
> 
>> [...]
>> Is this behavior the same with procd?
> 
> it is not the same. There is no special handling for specific overlay file 
> paths in procd.
> 
> ~ Jo
> 
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel@lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel


_______________________________________________
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel

Reply via email to