I hope you like academic exam questions, long since after you completed your
degree.  ;-)

Here's a new question for netapp admins:

(as root)
mkdir -p a/b/c
echo "secret info" > a/b/c/info.txt
chmod 777 a
chmod 700 a/b
chmod 777 a/b/c
chmod 666 a/b/c/info.txt

Now, a normal user should not have any access to info.txt because they get
blocked by the 700 perms at the "b" directory.  But if the file were moved
outside the "b" directory, or if the perms were more permissive on the "b"
directory, then normal users could have access.  The only obstacle stopping
users from accessing "secret info" are the 700 perms on "b" directory.

Create snapshot.

echo "public info" > a/b/c/info.txt
Now, do one of the following:
  mv a/b/c a/c
  or
  chmod 777 a/b

By doing this, normal users have been granted access to info.txt, but if
they read it, they'll only see "public info."  But the question is:  Can a
normal user access "secret info" in either a/c/.snapshot, or in
a/b/c/.snapshot?


_______________________________________________
Tech mailing list
[email protected]
http://lopsa.org/cgi-bin/mailman/listinfo/tech
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to