Re: Your backup is unsafe!

Riley Williams (rhw@MemAlpha.CX)
Sun, 1 Aug 1999 01:47:45 +0100 (GMT)


Hi Barry.

>> Attempts to delete the LFN name would succeed, resulting in the
>> file only having its MSDOS format name, and attempts to delete
>> an MSDOS named file with no LFN attached to it would succeed and
>> remove the file.

>> Comments?

> Yes. When I do an "rm /mnt/dos_volume/file-with-long-name.txt",
> I want the file *itself* to be gone, just as if I had done "rm
> /mnt/dos_volume/file-w~1.txt".

In other words, if I do the following on a system with an ext2 root
partition...

Q> cd /
Q> touch sample1
Q> ln sample1 sample2
Q> rm -f sample2

...I should expect to see both sample1 and sample2 vanish? I think
not.

Personally, I would prefer to see the SAME behaviour regardless of
whether it's on an ext2 partition, a vfat partition, an umsdos
partition or a little-green-men-from-mars-fs partition, and would
consider anything else to be broken.

> If we want to be able to eliminate the LFN, then perhaps
> "mv /mnt/dos_volume/file-with-long-name.txt
> /mnt/dos_volume/file-w~1.txt" should do it (that is, moving the
> LFN onto its short name)?

So, if you telnet into a system you've been given access to for some
contract, and find a document with a hard link to itself under a
different name, do you want the fact that you deleted one of the hard
links to also delete the document itself simply because you forgot to
check what type of partition it was on?

> (Disclaimer: I don't know what kind of feasibility / difficulty
> / cleanliness this whole thing has in the first place.

It's not at all hard to do either way, but there are SERIOUS security
implications to the behaviour you are requesting, simply because the
said behaviour would be so different to what happens on every other
file system.

> BTW, I'd rather not have this stuff added in the first place
> than have it added and not let me remove a file using its LFN.)

If you want an insecure system, that's your priviledge.

Best wishes from Riley.

+----------------------------------------------------------------------+
| There is something frustrating about the quality and speed of Linux |
| development, ie., the quality is too high and the speed is too high, |
| in other words, I can implement this XXXX feature, but I bet someone |
| else has already done so and is just about to release their patch. |
+----------------------------------------------------------------------+
* ftp://ftp.MemAlpha.cx/pub/rhw/Linux
* http://www.MemAlpha.cx/kernel.versions.html

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/