Tomas and Dan, thanks for the explanations. So if the process have already a handle (file descriptor) to apple, it can continue using it, even when I chmod 700 one of its parents. On the other hand, any new process trying to get a handle to apple MUST traverse the directory tree. This is what I understand. Thanks again for the explanations.
7. Mar 2018 15:05 by to...@tuxteam.de: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Wed, Mar 07, 2018 at 11:54:06AM -0000, Dan Purgert wrote: > > [...] > >> Think of it as being somewhat like a parking lot / garage with a gate at the >> entrance. > > Uh-oh. A car analogy :) > >> You enter the lot / garage, get your ticket, and are admitted in. Now >> you're free to go anywhere in the lot to find a space (equivalent of >> opening / editing files). >> >> While you're driving around the lot, the attendant closes the gate and >> puts up a "Lot Full" sign [...] > > Nice metaphor, thanks! > > Cheers > - -- t > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.12 (GNU/Linux) > > iEYEARECAAYFAlqf1ZcACgkQBcgs9XrR2kbOWACdFPkI+DDHLgP7IUmVRWNxktJB > l0wAn1MoVVSAAQ/X3175kLWFlzvhywhq > =dG8K > -----END PGP SIGNATURE-----