Path: utzoo!utgpu!water!watmath!clyde!att!osu-cis!tut.cis.ohio-state.edu!bloom-beacon!apple!amdahl!pacbell!ptsfa!jmc From: jmc@ptsfa.PacBell.COM (Jerry Carlin) Newsgroups: comp.unix.wizards Subject: Re: NFS security Keywords: NFS, mknod Message-ID: <4477@ptsfa.PacBell.COM> Date: 1 Sep 88 21:17:22 GMT References: <126@leibniz.UUCP> <670028@hpclscu.HP.COM> <1394@basser.oz> <604@sequent.cs.qmc.ac.uk> Reply-To: jmc@ptsfa.PacBell.COM (Jerry Carlin) Organization: Pacific * Bell, San Ramon, CA Lines: 12 In article <604@sequent.cs.qmc.ac.uk> liam@cs.qmc.ac.uk (William Roberts) writes: >This is not an NFS problem, since it is equally applicable to >non-superusers on a local machine: it is simply a hint that >mknod should be root-only. :-) This is not a problem in the System V.2 world. Not only does mknod.c check for superuser (easily bypassable) but mknod(2) does not allow anyone but root to mknod anything but FIFO's. -- Jerry Carlin (415) 823-2441 {bellcore,sun,ames,pyramid}!pacbell!jmc To dream the impossible dream. To fight the unbeatable foe.