Re: filesystem access security

2003-11-29 Thread James Buchanan
This seems like a good idea, but why should it be necessary to examine the trusted status of users' translators when a user wouldn't normally have write access to the root filesystem? Shouldn't it be the case that system translators affecting critical things system-wide have a set of capabilities,

Re: filesystem access security

2003-11-29 Thread Niels Möller
James Buchanan <[EMAIL PROTECTED]> writes: > This requires that glibc always does a secure lookup, and then inspects > the node to decide if it wants to resolve the translator or not. This > adds a small cost to all cross-translator lookups, but cross-translator > lookups are expensive already an