Jeff Hanson:
> With the chmod permission changes the chown is not necessary.  The ro
> branch files in the squashfs are owned by wineadmin.  The permissions
> are not a problem since the squashfs is a ro loop mount.  Any writes
> will be to the aufs rw branch that the user owns.

If you have very important file for security such like /etc/passwd, then
the permission bits in the ro squashfs can be a problem. As you know,
passwd file is world-readble but only an administrator can write.
If you set it world writable in the lower ro branch and provide users
aufs, then users can modify the file in aufs. Of course it is limited
within the rw branch and aufs world, and highly depending upon the
meaning of the file.
And I just pointed out you may be able to -R for chmod.


J. R. Okajima

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb

Reply via email to