Am Donnerstag, 5. April 2007 02:59 schrieb [EMAIL PROTECTED]: Beware, I'm not a native speaker, too, but how do you like this:
> (from the aufs manual) > ---------------------------------------------------------------------- > .B warn_perm nowarn_perm > Enables or disables the warning about uid/gid/permission at adding a > branch. The default is warn_perm (cf. DIAGNOSTICS). .B warn_perm nowarn_perm When adding a branch, by default, aufs warns about non matching permission settings, which may impose a security risk. Disable this warning with nowarn_perm (cf. DIAGNOSTICS). > .SH DIAGNOSTICS > When you add an branch to your union, aufs may warn you about the > privilege or security of the branch, which is the permission bits, > owner and group of the top directory of the branch. > If your upper writable branch has a world writable top directory, > a malicious user can create any files on the writable branch directly, > like copyup and modify manually. I am afraid it can be a security > issue. .SH DIAGNOSTICS When adding a branch to your union, aufs warns you, if the privilege settings (permission bits, owner and group) of the newly added branch do not match with those of the branch below, since differences may impose a serious security issue, e.g.: if your upper writable branch is a world writable top directory, a malicious user is able to create and modify any files on the writable branch directly. > ---------------------------------------------------------------------- > By the way, this is not the first time people asked me about this > warning. Is it so strange? Is the description in the manual too poor? Or > people doesn't read the manual, then where and how should I describe? No, your descriptions are fine. The expressiveness can and hopefully will be improved by native speakers over time but hey, this problem is as old as humans create things and supply manuals. All known attempts to raise the RTFM level failed so far. Don't be alarmed, this is just business as usual. Have a nice day, Junjiro. Pete ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
