Subject: Re: chroot jail for ftpd
To: Andrew Brown <atatat@atatdot.net>
From: Jason R Thorpe <thorpej@wasabisystems.com>
List: tech-kern
Date: 10/18/2001 15:32:51
On Thu, Oct 18, 2001 at 06:20:31PM -0400, Andrew Brown wrote:
> correct me if i'm wrong, but can't we also add
>
> (VTOI(vp)->i_ffs_mode & (S_IXUSR | S_IXGRP | S_XOTH)) != 0
>
> to that to do what thor was asking about? hmm...perhaps that kind of
> construct is verbotten in this part of the kernel...
Yes, highly verbotten. There is another way to accomplish this. I'll
take a look, but I would suggest making THAT check dependent on a sysctl
variable that defaults to "off".
--
-- Jason R. Thorpe <thorpej@wasabisystems.com>