cattach(1) says...

Ordinarily, the names of all currently attached directories can be
obtained by listing the contents of /crypt (e.g., with ls(1)). If the
specified name begins with a '.' (dot), however, cfsd will not include
the name in directory listings.  By using a  hard-to-guess name, this
mechanism can be used to provide some protection against attackers who
can spoof the UID on the client machine.

...which indicates that CFS is doing what it is supposed to do.


- Bruce


-- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Reply via email to