Thanks Yuri! I do wonder what security implications this might have for the policy engine where a nefarious user could trick it into performing an action on another file via symlink hijacking. Truthfully I've been more worried about an accidental hijack rather than someone being malicious. I'll open an RFE for it since I think it would be nice to have. (While I'm at it, I think I'll open another for having chown call exposed via the API).

-Aaron

On 7/22/16 3:24 PM, Yuri L Volobuev wrote:
In a word, no. I can't blame anyone for suspecting that there's yet
another hidden flag somewhere, given our track record, but there's
nothing hidden on this one, there's just no code to implement
O_NOFOLLOW. This isn't Posix, and we just never put it in. This would be
a reasonable thing to have, so if you feel strongly enough about it to
open an RFE, go for it.

yuri

Inactive hide details for "Knister, Aaron S. (GSFC-606.2)[COMPUTER
SCIENCE CORP]" ---07/21/2016 09:05:11 AM---Hi Everyone, I've"Knister,
Aaron S. (GSFC-606.2)[COMPUTER SCIENCE CORP]" ---07/21/2016 09:05:11
AM---Hi Everyone, I've noticed that many GPFS commands (mm*acl,mm*attr)
and API calls (in particular the

From: "Knister, Aaron S. (GSFC-606.2)[COMPUTER SCIENCE CORP]"
<[email protected]>
To: gpfsug main discussion list <[email protected]>,
Date: 07/21/2016 09:05 AM
Subject: [gpfsug-discuss] GPFS API O_NOFOLLOW support
Sent by: [email protected]

------------------------------------------------------------------------



Hi Everyone,

I've noticed that many GPFS commands (mm*acl,mm*attr) and API calls (in
particular the putacl and getacl functions) have no support for not
following symlinks. Is there some hidden support for gpfs_putacl that
will cause it to not deteference symbolic links? Something like the
O_NOFOLLOW flag used elsewhere in linux?

Thanks!

-Aaron_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss




_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss


--
Aaron Knister
NASA Center for Climate Simulation (Code 606.2)
Goddard Space Flight Center
(301) 286-2776

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

Reply via email to