Re: [RFC] FUSE permission modell (Was: fuse review bits)

Frank Sorenson wrote:
> > That does not make sense.
> > 
> > Are you saying you cannot trust your own sshfs userspace daemon?
> 
> The user who wrote the userspace code may be able to, but the system
> shouldn't trust the userspace daemon.  Permissions will be enforced by
> the ssh server.

In fact that's wrong.  Although permissions are enforced by the ssh
server, the server assumes that once a conncection is established, all
requests on it are from the same originating user.  The server is not
able to check which user is accessing the files on the client machine
- which is why Miklos wants/needs restrictive permissions on the
client machine too.

-- Jamie
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• References:
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Daniel Jacobowitz <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Miklos Szeredi <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Daniel Jacobowitz <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Miklos Szeredi <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Daniel Jacobowitz <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Miklos Szeredi <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Jamie Lokier <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Miklos Szeredi <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Jamie Lokier <[email protected]>
  • Re: [RFC] FUSE permission modell (Was: fuse review bits)
    • From: Frank Sorenson <[email protected]>

• Prev by Date: Re: set keyboard repeat rate: EVIOCGREP and EVIOCSREP
• Next by Date: Re: [RFC] FUSE permission modell (Was: fuse review bits)
• Previous by thread: Re: [RFC] FUSE permission modell (Was: fuse review bits)
• Next by thread: Re: [RFC] FUSE permission modell (Was: fuse review bits)
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]