Dan Price wrote:
> I know that at some point the performance guys wanted to make sync's by
> non-root users do nothing, but IIRC it was deemed too risky or something.
> Maybe we should go do that for Nevada.  Anyone in request-sponsor land
> have some background info they could point us at?

For want of a better place to discuss this I'm directing this to 
security discuss.

Personally I depend on the fact that I can sync as a non root user.  I 
might be paranoid or being silly but any time I hear thunderclaps I type 
sync.  I also do it to when my laptop battery is getting low.

If you were to modify sync you would also need to modify lockfs so that 
lockfs -f doesn't work without privilege either.

I think these might be ideally specified as basic privileges, that is 
all users have them by default (just like the ability to see the 
existence of others processes in ps output) but they can be removed by 
the system admin.

Darren J Moffat

Reply via email to