OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
FreeBSD Security Archives: Re: Not sure if you got it...

Re: Not sure if you got it...

Warner Losh (impvillage.org)
Wed, 01 Sep 1999 00:40:41 -0600

In message <Pine.BSF.4.10.9908311022370.45784-100000isr4033.urh.uiuc.edu> Frank Tobin writes:
: 3) Use chflags -R <noAllFlagsOrSuch>, followed by rm -rf. This two step
: process is consistent with unix philosophy. This is probably the cleanest
: (traditionally) solution. However, it causes two disk passes instead of
: one.

And might also have a race condition in it, since if someone adds a
flag after the chflags -R has gone over it, rm will not be able to
remove the file.

: 4) Use find(1) with -exec chflags and rm. This has the downside of many
: processes getting started (one chflags and one rm for each node), and
: again, more disk usage (we don't all use SCSI yet).

5) find -delete should take all measures that it can to remove the file.

The whole file flags thing was a cool idea, but it is a PITA and
likely shouldn't have been implemented the way it was:-(

Warner

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

This archive was generated by hypermail 2.0b3 on Wed Sep 01 1999 - 01:38:57 CDT