Linux-kernel mailing list archive 2000-26,: Re: IMMUTABLE and APPEND-ONLY rationales

# Re: IMMUTABLE and APPEND-ONLY rationales

Igmar Palsenberg (maillist@chello.nl)
Mon, 26 Jun 2000 15:26:34 +0200 (CEST)

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Igmar Palsenberg: "Re: IMMUTABLE and APPEND-ONLY rationales"
- Previous message: Alan Cox: "Re: Query on UDP Sockets on Linux."

> Erm... Folks, let me fill in a detail that seems to be missing here. Dunno
> about BSDI, but 4.4BSD as it had been released (and {Free,Net,Open}BSD)
> have more elaborate scheme - they have immutable and user-immutable.
> Rules looks so: immutable is subject to securelevel limitations,
> user-immutable is a normal attribute (can be set/reset the same way it is
> for any other permission bit). Either of them prevents modification/unlinking/
> renaming/creating a link to. That way one can have the security-enforcing
> behaviour (normal immutable) _and_ normal users can use it as protection
> on their files. Root can override the user-immutable (as every other
> permission bit). Same goes for append-only. That makes sense - there are
> times when you want to protect against your own screwups and be able to
> do/undo that without su. If we add that we may restore the securelevel-type
> scheme for strong variants of these (useful for enforced security) and let
> users have the weaker variant.

Hmm.. Looks like a nice way to handle things..

Igmar

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

- Next message: Igmar Palsenberg: "Re: IMMUTABLE and APPEND-ONLY rationales"
- Previous message: Alan Cox: "Re: Query on UDP Sockets on Linux."