Re: dynamic /dev security hole?

[Greg KH]

On Sun, Aug 08, 2004 at 11:04:31AM -0400, Albert Cahalan wrote:
> Perhaps there are other ways to deal with the problem though.

Do what a number of distros do these days, make /dev a ramfs or tmpfs.
That way no hardlinks outside /dev will work:
	$ ln /dev/hda /tmp/foo
	ln: creating hard link `/tmp/foo' to `/dev/hda': Invalid cross-device link

thanks,

greg k-h
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/