Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 12 Aug 2012 21:54:35 +0400
From: Vasily Kulikov <segoon@...nwall.com>
To: owl-dev@...ts.openwall.com
Subject: protected_{symlinks,hardlinks,fifos}

Solar,

The patch implementing protected_{symlinks,hardlinks} was backported from the
upstream kernel.  Almost the same way protected_fifos was implemented (ala
HARDEN_FIFO).  They work well.

The question here is -- what defaults should be for OpenVZ containers:
on, off, or inherit CT0's value?

My opinion is default on, the same with CT0 (which runs Owl).

-- 
Vasily

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ