[zfs-discuss] Progress update about implementing the new basic privileges to restrict file access

2006-07-12 Thread Nicolai Johannes
Please answer to this mail on [EMAIL PROTECTED] Two weeks ago, the list discussed my OpenSolaris Google Summer of Code proposal of introducing new basic privileges in order to be able to restrict file access. My first proposal was to introduce five new privileges that if dropped forced the proc

AW: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-22 Thread Nicolai Johannes
, writing file would make sense. Regards Johannes Nicolai -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] im Auftrag von [EMAIL PROTECTED] Gesendet: Do 22.06.2006 20:23 An: Nicolas Williams Cc: Jonathan Adams; Nicolai Johannes; [EMAIL PROTECTED] Betreff: Re: AW: AW: [zfs-discuss] Proposal for

AW: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-22 Thread Nicolai Johannes
: Do 22.06.2006 20:11 An: Jonathan Adams Cc: Nicolai Johannes; zfs-discuss@opensolaris.org; [EMAIL PROTECTED]; [EMAIL PROTECTED] Betreff: Re: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks On Thu, Jun 22, 2006 at 11:06:48AM -0700, Jonathan Adams wrote

AW: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-22 Thread Nicolai Johannes
22.06.2006 11:55 An: Nicolas Williams Cc: Nicolai Johannes; [EMAIL PROTECTED]; zfs-discuss@opensolaris.org; Mark Shellenbaum Betreff: Re: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks >On Thu, Jun 22, 2006 at 01:01:38AM +0200, [EMAIL PROTECTED] wr

AW: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-22 Thread Nicolai Johannes
: Nicolas Williams Cc: Nicolai Johannes; [EMAIL PROTECTED]; zfs-discuss@opensolaris.org; Mark Shellenbaum Betreff: Re: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks >On Thu, Jun 22, 2006 at 01:01:38AM +0200, [EMAIL PROTECTED] wrote: >>

AW: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-22 Thread Nicolai Johannes
vileges. Regards Johannes Nicolai -Ursprüngliche Nachricht- Von: Nicolas Williams [mailto:[EMAIL PROTECTED] Gesendet: Do 22.06.2006 04:36 An: Nicolai Johannes Cc: [EMAIL PROTECTED]; zfs-discuss@opensolaris.org Betreff: Re: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem acce

AW: AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-21 Thread Nicolai Johannes
new permissions is not clear yet, I will give further examples. Thanks in advance Johannes PS: The longer I think about my three checking possibilities the more I favour option two. -Ursprüngliche Nachricht- Von: Nicolas Williams [mailto:[EMAIL PROTECTED] Gesendet: Do 22.06.2006

AW: AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-21 Thread Nicolai Johannes
me with hints what clauses in my proposal caused all the confusion so that I can correct them. Johannes -Ursprüngliche Nachricht- Von: Mark Shellenbaum [mailto:[EMAIL PROTECTED] Gesendet: Mi 21.06.2006 21:21 An: Nicolai Johannes Cc: [EMAIL PROTECTED]; zfs-discuss@opensolaris.org Betreff:

AW: [zfs-discuss] Proposal for new basic privileges related with filesystem access checks

2006-06-21 Thread Nicolai Johannes
Thank you Johannes -Ursprüngliche Nachricht- Von: Mark Shellenbaum [mailto:[EMAIL PROTECTED] Gesendet: Mi 21.06.2006 18:11 An: Nicolai Johannes Cc: zfs-discuss@opensolaris.org; [EMAIL PROTECTED] Betreff: Re: [zfs-discuss] Proposal for new basic privileges related with filesystem access c

[zfs-discuss] RE: [Security-discuss] Proposal for new basic privileges related with file system access checks

2006-06-21 Thread Nicolai Johannes
this information to the user, an attacker may gather additional information about the objects in the file system. -Original Message- From: [EMAIL PROTECTED] on behalf of Nicolai Johannes Sent: Wed 6/21/2006 1:23 AM To: zfs-discuss@opensolaris.org Cc: [EMAIL PROTECTED] Subject: [Security

[zfs-discuss] Proposal for new basic privileges related with file system access checks

2006-06-20 Thread Nicolai Johannes
For my Google Summer of Code project for OpenSolaris, my job is to think about new basic privileges. I like to propose five new basic privileges that relate with file system access checks and may be used for daemons like ssh or ssh-agent that (after starting up) never read or write user specifi