Christopher Smith wrote:
Kereberos and LDAP based systems manage the UID number in a distributed
way. Linux support for ACL's, while not nearly as nicely integrated as
NT's, does provide most of the magic.
Until you unplug the drive and plug it into a machine that isn't running
the same Kerberos.
general, multiple streams on a file has proven to be a fairly
questionable feature.
Funny how almost every file system newer than FAT32 supports it. :-) Of
course, when most people want multiple streams on a file, they just code
multiple files in a directory, or implement it as a library.
Yes, if you have it set up for auditing, it can and will do this, just
like NT. Not surprising since this is a requirement for C2 security ratings.
Cool. Not quite the same thing, but I guess you could use it for
something like that.
man inotify
Nifty! They fixed it since last I looked. I wondered why in the world
anyone would use signals to transmit information like that when there's
a perfectly valid file handle mechanism around. I looked at the previous
way of doing that, and thought "why not just some device driver that you
write what you want to monitor to it, and then do a blocking read until
it tells you something changed." Too much Amiga in my background, I guess.
man star (for information on backup)
Excellent. Good to know. I'll have to see if the distro I'm using has
this available.
man ionice
Sharp. Again, I'll have to see if it's in my distro. That'll be handy.
Ugh, if you'd looked at how this actually ends up working from a
security perspective, you wouldn't have mentioned it. ;-)
Well, yah, but it's better than nothing.
Anyway, TCFS gives you access to the useful bits of EFS.
I'll check that out.
It also lacks the ability to clean up temp files when your program
crashes or when you log out.
openat()
unlinkat()
Not what I meant. I meant that if I create a file in /tmp/xyz I want it
to get unlinked for me if I dump core. Sort of like creating the file,
unlinking it, and continuing to hold it open with no names in any
directories pointing to it, only with a name in the directory pointing
to it. :-)
Interestingly, Windows programs still do the same thing.
Not all of them. Obviously it's not supported on the legacy file
systems, so some programs that are supposed to work with FAT and/or were
ported from Linux do something different.
--
Darren New / San Diego, CA, USA (PST)
His kernel fu is strong.
He studied at the Shao Linux Temple.
--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-lpsg
