Bug#709625: protected_hardlinks is too broad - make it per-filesystem instead?

2013-05-30 Thread Steve McIntyre
On Sun, May 26, 2013 at 03:31:03AM +0100, Ben Hutchings wrote: On Fri, 2013-05-24 at 15:30 +0100, Steve McIntyre wrote: Alternatively, I'm pondering: if the main thrust of the hardlink protection is to prevent attacks against system files, then it might make more sense to change

Bug#709625: protected_hardlinks is too broad - make it per-filesystem instead?

2013-05-25 Thread Ben Hutchings
Control: severity -1 wishlist Control: found -1 3.8.13-1 On Fri, 2013-05-24 at 15:30 +0100, Steve McIntyre wrote: [...] For now, on that system we have changed the default settings via /proc but it's not a real solution for us and DSA don't want to do it permanently. It certainly sounds like

Processed: Re: Bug#709625: protected_hardlinks is too broad - make it per-filesystem instead?

2013-05-25 Thread Debian Bug Tracking System
Processing control commands: severity -1 wishlist Bug #709625 [src:linux] protected_hardlinks is too broad - make it per-filesystem instead? Severity set to 'wishlist' from 'normal' found -1 3.8.13-1 Bug #709625 [src:linux] protected_hardlinks is too broad - make it per-filesystem instead?

Bug#709625: protected_hardlinks is too broad - make it per-filesystem instead?

2013-05-24 Thread Steve McIntyre
Package: src:linux Version: 3.2.41-2 Severity: normal Hi, I think that the new security feature to restrict hardlinks is a great idea, but it is also causing me problems. In debian-cd, we rely on the ability to make hardlinked copies of files from a debian mirror into temporary disk trees. Since