Tasmanian Devil wrote:
> etc/pf.conf:
>         type (file, link)
>         permissions (0600, 0755)

Change the permissons for the symbolic link from 0755 to 0600 (same
permissions like on your other pf.conf.xxx files).

> My question: Is a symbolic link really insecure?

Only with wrong permissions.

Sorry, I was too fast, I just saw that symbolic links don't have
modes. I don't now then, sorry!

I'd say they do have modes, but they are not very useful:

$ umask 777; ln -s a b
$ umask 000; ln -s a c
$ ls -lF
total 0
l---------  1 alexander  staff  1 Dec  1 11:47 b@ -> a
lrwxrwxrwx  1 alexander  staff  1 Dec  1 11:47 c@ -> a
$ echo "test" > a
$ cat b
test
$ cat c
test

/Alexander

Reply via email to