Yevgeniy Aleynikov wrote:
> As pointed by Ken - we do have alot of file renames (qmail).
> But 2-nd solution, directory-only rename serialization, probably won't
> affect performance as much.
> 
> But i believe it's not only us who's gonna have problem when exploit
> code will be known by everybody sooner or later....

Dan's non-atomicity assumption on renames is incorrect.

Even if it's were correct, it's possible to recover fully following
a failure, because metadata updates are ordered (there is a real
synchronization between dependent operations).

I think that a workaround would be to comment the directory fsync()
code out of qmail, which apparently thinks it's running on extfs
or an async mounted FFS.

-- Terry

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to