Hello Eduard,

On 02/24/2011 09:11 AM, Eduard Bloch wrote:
> #include <hallo.h>
> * Bernd Schubert [Wed, Feb 23 2011, 02:14:15PM]:
> 
>>> a) unionfs-fuse -ocow repdir=RW:/var/cache=RO testdir -ononempty
>>>    chmod -R a+w testdir 
>>>
>>> b) unionfs-fuse -ocow repdir=RW:/var/log=RO testdir -ononempty
>>>    echo foo >> testdir/cups/access_log
>>>    (or similar existing file in a read-only directory)
>>
>>
>> sorry, can't follow you:
>>
>> root@fslab3 ~>unionfs-fuse -ocow,nonempty repdir=RW:/var/log=RO testdir
>> root@fslab3 ~>echo foo >> testdir/cups/access_log
>>
>> If you are working as another user and the copy-from-directory/file/path
>> is owned by root or 
> 
> Of course I was not working as root. And I don't think it's a pure
> wishlist because working with basic permissions belongs to essential
> functionality, IMHO.


well, you write to a file owned by another user and to a file you do not
have permissions to write to...
Really, we have ripped out all permission code in unionfs-fuse and let
fuse do the job to check permissions.

In 0.25 added code to allow the user to disable fuse-default-permission
handling if not running with super-user rights. However, I am simply not
*absolutely* sure (yet) that will not cause a security issue and
therefore it has to be specified manually.
Also please compare it with in-kernel-filesystems - you cannot start
those without super-user rights. If you start unionfs-fuse as root, you
will not have that problem....

Then, one way or another it is too late for Squueze. Unionfs-fuse did
not go into Squeeze, as kfreebsd is missing fuse-utils and as I simply
did not have the time to try to upload a new package that removes that
dependency on fuse-utils and sets it to recommended only.
If there is a chance to get it into 6.01, it will be the current version
with that minor change.
If not and anyway, 0.25, for which I will just still need a few hours to
add a simple IOCTL interface, will be released during the next weeks. So
I simply will not make myself extra work for another package upload
(already working again far too long this day and all the other days
during the week....). Besides that I'm a package maintainer only and so
it always takes ages (about 6 months last year) to get someone to upload
a new version for me.


Cheers,
Bernd




-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to