About this list Date view Thread view Subject view Author view Attachment view

From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Fri 14 May 2004 - 22:35:23 BST


On Fri, May 14, 2004 at 05:12:34PM -0400, Gregory (Grisha) Trubetskoy wrote:
>
> It looks like the attributes that do not require CAP_LINUX_IMMUTABLE (i.e.
> anything except IMMUTABLE_[FILE|LINK]FL and APPEND_FL) can by modified by
> root from within a vserver:
>
> ]# vserver grisha enter
> ipv4root is now 192.168.1.33
> New security context is 10033
> [root_at_vserver:grisha /]lsattr /bin/ls
> ----i------t- /bin/ls
> [root_at_vserver:grisha /]chattr +d /bin/ls
> [root_at_vserver:grisha /]lsattr /bin/ls
> ----i-d----t- /bin/ls
>
> I'm not sure this is workng "as expected". It seems that an immutable file
> should be immutable including attribute changes. This doesn't seem like a

yep, should not be allowed ...
at least not on 'unified' files (i.e. with immutable set)

please, always include some basic system information
like kernel version, patch version, etc ...

TIA,
Herbert

> VServer, but rather a general Linux problem, but I wonder if the VServer
> patches should insist that immutability includes flag changing.
>
> Grisha
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Fri 14 May 2004 - 22:35:18 BST by hypermail 2.1.3