Re: moving /bin/ip to /sbin/ip?

2007-09-11 Thread Denys Vlasenko
On Monday 10 September 2007 21:40, Natanael Copa wrote: Hi, Is it big deal to move /bin/ip to /sbin/ip? My problem is this: I use busybox for my distro with vserver support. The vserver package is built on a standard gentoo uclibc. I suspect the util-vserver build scripts check what is

Re: moving /bin/ip to /sbin/ip?

2007-09-11 Thread Denys Vlasenko
On Tuesday 11 September 2007 05:01, Paul Fox wrote: On Mon, Sep 10, 2007 at 10:40:11PM +0200, Natanael Copa wrote: It would be a lot easier for me to have the ip application in the same place as the original iproute2. In fact it makes things alot more easy to have the busybox

Re: Making DO_POSIX_CP configurable

2007-09-11 Thread Denys Vlasenko
On Tuesday 11 September 2007 00:19, Alexander Kriegisch wrote: In SVN rev. #18119 [1] the default behaviour of 'cp' was changed by Denis in order to improve security and also to save a few bytes. This leads to problems in our application scenario here: We work on a mipsel-based router platform

Re: Making DO_POSIX_CP configurable

2007-09-11 Thread Alexander Kriegisch
Hi Denys! Thanks for introducing a special case for block/character devices. :) In a way, you did more than I requested, in another you did not, because DO_POSIX_CP still is not configurable the way I thought it was obviously inquired by me. But as so often, questions need to be asked more

Re: moving /bin/ip to /sbin/ip?

2007-09-11 Thread Paul Fox
On Tuesday 11 September 2007 05:01, Paul Fox wrote: On Mon, Sep 10, 2007 at 10:40:11PM +0200, Natanael Copa wrote: It would be a lot easier for me to have the ip application in the same place as the original iproute2. In fact it makes things alot more easy to have the

Re: moving /bin/ip to /sbin/ip?

2007-09-11 Thread Bernd Petrovitsch
On Tue, 2007-09-11 at 00:01 -0400, Paul Fox wrote: On Mon, Sep 10, 2007 at 10:40:11PM +0200, Natanael Copa wrote: It would be a lot easier for me to have the ip application in the same place as the original iproute2. In fact it makes things alot more easy to have the busybox

Re: Making DO_POSIX_CP configurable

2007-09-11 Thread Denys Vlasenko
On Tuesday 11 September 2007 14:53, Ralf Friedl wrote: Hi Denys Can you point to real security problems from the use of cp with POSIX semantics? User comes to you and says I accidentally deleted my most important directory. I know that you make daily backups. Can you restore it from backup?

Re: Making DO_POSIX_CP configurable

2007-09-11 Thread Denys Vlasenko
On Tuesday 11 September 2007 12:34, Alexander Kriegisch wrote: Hi Denys! Thanks for introducing a special case for block/character devices. :) In a way, you did more than I requested, in another you did not, because DO_POSIX_CP still is not configurable the way I thought it was obviously

Re: moving /bin/ip to /sbin/ip?

2007-09-11 Thread Natanael Copa
On Tue, 2007-09-11 at 15:51 +0200, Bernd Petrovitsch wrote: On Tue, 2007-09-11 at 09:11 -0400, Paul Fox wrote: [...] sorry. when i said $PATH isn't always the answer, i meant, sometimes just using $PATH won't solve your problem. if you don't control the app, and it contains a hard-coded

Making DO_POSIX_CP configurable

2007-09-11 Thread Ralf Friedl
User comes to you and says I accidentally deleted my most important directory. I know that you make daily backups. Can you restore it from backup? You do cp -a /backup/home/user/dir /home/user But user has crafted it so that backup contains dir/many_more_dirs/innocuous_file, and he also

Re: Making DO_POSIX_CP configurable

2007-09-11 Thread Denys Vlasenko
On Tuesday 11 September 2007 17:32, Ralf Friedl wrote: User comes to you and says I accidentally deleted my most important directory. I know that you make daily backups. Can you restore it from backup? You do cp -a /backup/home/user/dir /home/user But user has crafted it so that

Re: Making DO_POSIX_CP configurable

2007-09-11 Thread Alexander Kriegisch
I am sending this answer to the list again, because it was my initial mistake that I sent the first copy of my last message to your address instead of to the list. Sorry, Denys, I was never talking about the scenario you are mentioning, really just about overwriting an existing character device