Re: unveil on MFS

2024-02-20 Thread Claudio Jeker
On Tue, Feb 20, 2024 at 03:36:05PM +0100, Christian Weisgerber wrote: > hahahahacker2009: > > > I found out that when I mount a mfs over /usr/obj (ffs), and do > > unveil("/usr/obj", "r"), it can still access the file. > > But if I unveil /usr or / the file cannot be accessed. > > Also note that

Re: unveil on MFS

2024-02-20 Thread hahahahacker2009
Vào Th 3, 20 thg 2, 2024 vào lúc 19:55 Claudio Jeker đã viết: > > On Tue, Feb 20, 2024 at 05:09:38AM -0700, Theo de Raadt wrote: > > Christian Weisgerber wrote: > > > > > Theo de Raadt: > > > > > > > Is it mfs specific -- or is it anytime there are layered mountpoints? > > > > > > Layered

Re: unveil on MFS

2024-02-20 Thread Claudio Jeker
On Tue, Feb 20, 2024 at 05:09:38AM -0700, Theo de Raadt wrote: > Christian Weisgerber wrote: > > > Theo de Raadt: > > > > > Is it mfs specific -- or is it anytime there are layered mountpoints? > > > > Layered mountpoints, it turns out. I can reproduce it by mounting > > another FFS over

Re: unveil on MFS

2024-02-20 Thread Theo de Raadt
Christian Weisgerber wrote: > Theo de Raadt: > > > Is it mfs specific -- or is it anytime there are layered mountpoints? > > Layered mountpoints, it turns out. I can reproduce it by mounting > another FFS over /usr/obj. I suspect unveil isn't aware of this situation and caches the first

Re: unveil on MFS

2024-02-19 Thread Theo de Raadt
Stuart Henderson wrote: > On 2024/02/19 23:00, hahahahacker2009 wrote: > > I cannot reproduce the problem with your code > > If I mount an MFS /usr/obj *over the top* of an existing FFS /usr/obj > then I can reproduce it, but not with MFS mounted on /mnt, /mnt/1, /usr/obj/1 Is it mfs specific

Re: unveil on MFS

2024-02-19 Thread Stuart Henderson
On 2024/02/19 23:00, hahahahacker2009 wrote: > I cannot reproduce the problem with your code If I mount an MFS /usr/obj *over the top* of an existing FFS /usr/obj then I can reproduce it, but not with MFS mounted on /mnt, /mnt/1, /usr/obj/1

Re: unveil on MFS

2024-02-19 Thread hahahahacker2009
I cannot reproduce the problem with your code Will try building got later Vào Th 2, 19 thg 2, 2024 vào lúc 16:26 Christian Weisgerber đã viết: > > Something isn't right with unveil() and MFS on -current. > > The devel/got port doesn't build on MFS, because the template help