Path: utzoo!attcan!uunet!jarthur!usc!cs.utexas.edu!rice!sun-spots-request From: auspex!guy@uunet.uu.net (Guy Harris) Newsgroups: comp.sys.sun Subject: Re: Nested Exports Keywords: Software Message-ID: <9394@brazos.Rice.edu> Date: 27 Jun 90 18:16:16 GMT Sender: root@rice.edu Organization: Sun-Spots Lines: 19 Approved: Sun-Spots@rice.edu X-Refs: Original: v9n234 X-Sun-Spots-Digest: Volume 9, Issue 236, message 13 |Does the restriction that you cannot export both a tree and a subtree on |the same filesystem still apply? Yes. |If so does this mean that you can't export a whole partition to one |machine and a restricted piece to another? Yes. |Whats the reason for this restriction? Because, even if that restriction didn't exist, you *still* couldn't securely export a whole partition to one machine and a restricted piece to another, if your intent was to restrict the access of the "another" to the rest of the tree. The "another" could walk up the directory tree and get out of its restricted piece.... (The code might have to implement something other than standard UNIX semantics for doing ".." up above a mount point, but that's just a Simple Matter of Programming....)