atom feed82 messages in org.freebsd.freebsd-hackersProtection from the dreaded "rm -fr /"
FromSent OnAttachments
Giorgos KeramidasOct 2, 2004 1:19 am 
Edwin GroothuisOct 2, 2004 1:33 am 
Michael ReifenbergerOct 2, 2004 1:34 am 
Giorgos KeramidasOct 2, 2004 1:39 am 
Giorgos KeramidasOct 2, 2004 1:51 am 
Ryan SommersOct 2, 2004 1:52 am 
Giorgos KeramidasOct 2, 2004 1:53 am 
Giorgos KeramidasOct 2, 2004 2:06 am 
Max LaierOct 2, 2004 2:24 am 
Giorgos KeramidasOct 2, 2004 3:19 am 
Greg BlackOct 2, 2004 3:57 am 
Ceri DaviesOct 2, 2004 4:22 am 
Ceri DaviesOct 2, 2004 4:25 am 
Max LaierOct 2, 2004 4:51 am 
Peter JeremyOct 2, 2004 5:43 am 
Dimitry AndricOct 2, 2004 7:48 am 
Simon L. NielsenOct 2, 2004 8:03 am 
Sean FarleyOct 2, 2004 8:41 am 
SamOct 2, 2004 8:54 am 
Jacques A. VidrineOct 2, 2004 9:46 am 
Tillman HodgsonOct 2, 2004 9:51 am 
Lee HarrOct 2, 2004 9:53 am 
Tillman HodgsonOct 2, 2004 9:55 am 
Giorgos KeramidasOct 2, 2004 10:10 am 
Giorgos KeramidasOct 2, 2004 10:55 am 
Giorgos KeramidasOct 2, 2004 10:56 am 
Tillman HodgsonOct 2, 2004 11:09 am 
Doug RussellOct 2, 2004 11:37 am 
David SchultzOct 2, 2004 11:50 am 
David SchultzOct 2, 2004 12:01 pm 
Michael ReifenbergerOct 2, 2004 12:16 pm 
Doug RussellOct 2, 2004 12:18 pm 
Michael ReifenbergerOct 2, 2004 12:26 pm 
Dmitry FrolovOct 2, 2004 12:37 pm 
Doug RussellOct 2, 2004 12:48 pm 
David SchultzOct 2, 2004 1:11 pm 
Michael ReifenbergerOct 2, 2004 1:49 pm 
Tillman HodgsonOct 2, 2004 2:05 pm 
Garance A DrosihnOct 2, 2004 2:22 pm 
Ceri DaviesOct 2, 2004 3:00 pm 
sor...@cydem.orgOct 2, 2004 3:11 pm 
Giorgos KeramidasOct 2, 2004 4:28 pm 
Giorgos KeramidasOct 2, 2004 4:28 pm 
David SchultzOct 2, 2004 5:19 pm 
M. Warner LoshOct 2, 2004 6:26 pm 
M. Warner LoshOct 2, 2004 6:28 pm 
M. Warner LoshOct 2, 2004 6:29 pm 
Giorgos KeramidasOct 2, 2004 6:53 pm 
Thomas David RiversOct 2, 2004 6:53 pm 
M. Warner LoshOct 2, 2004 7:07 pm 
Doug RussellOct 2, 2004 7:11 pm 
Tillman HodgsonOct 2, 2004 8:09 pm 
Tillman HodgsonOct 2, 2004 8:11 pm 
David SchultzOct 2, 2004 11:31 pm 
Sam LawranceOct 3, 2004 12:35 am 
Chris HowellsOct 3, 2004 5:07 am 
Mike MeyerOct 3, 2004 5:07 am 
Mike MeyerOct 3, 2004 5:07 am 
M. Warner LoshOct 3, 2004 10:37 am 
Greg ShenautOct 3, 2004 11:14 am 
Dmitry MorozovskyOct 3, 2004 11:28 am 
Thomas SparrevohnOct 3, 2004 11:40 am 
Dag-Erling SmørgravOct 3, 2004 1:33 pm 
Roman NeuhauserOct 3, 2004 2:59 pm 
M. Warner LoshOct 3, 2004 6:38 pm 
Mark MurrayOct 4, 2004 1:10 am 
Dmitry KarasikOct 4, 2004 3:15 am 
Dave HorsfallOct 4, 2004 3:27 am 
Giorgos KeramidasOct 4, 2004 3:49 am 
Stijn HoopOct 4, 2004 4:52 am 
Ceri DaviesOct 4, 2004 5:33 am 
Søren SchmidtOct 4, 2004 5:43 am 
Chris HowellsOct 4, 2004 6:16 pm 
Chris DillonOct 5, 2004 8:36 am 
SamOct 5, 2004 9:03 am 
Giorgos KeramidasOct 5, 2004 5:12 pm 
Giorgos KeramidasOct 5, 2004 5:42 pm 
Matthew DillonOct 5, 2004 6:30 pm 
Matthew DillonOct 5, 2004 6:56 pm 
Matthew DillonOct 5, 2004 11:39 pm 
Thomas SparrevohnOct 6, 2004 12:49 pm 
Lyndon NerenbergOct 28, 2004 5:31 am 
Subject:Protection from the dreaded "rm -fr /"
From:David Schultz (da@FreeBSD.ORG)
Date:Oct 2, 2004 11:31:11 pm
List:org.freebsd.freebsd-hackers

On Sat, Oct 02, 2004, M. Warner Losh wrote:

In message: <2004@gothmog.gr> Giorgos Keramidas <kera@freebsd.org> writes: : On 2004-10-02 19:29, "M. Warner Losh" <im@bsdimp.com> wrote: : > In message: <2004@seekingfire.com> : > Tillman Hodgson <till@seekingfire.com> writes: : > : It'll never work, though, that's the thing. At some point it'll rm : > : something it itself needs and error out. There isn't a way to use `rm : > : -rf /` that /doesn't/ result in foot-shooting. : > : > No. You are wrong. if you rm -rf in a chroot, then it won't result : > in foot shooting, necessarily, like it would outside a chroot. : : Since a chroot can always be rm -fr deleted from outside the chroot, : this isn't really a great problem, is it?

You miss the point.

You said it was always a foot-shooting move. I gave you a concrete example of where it wasn't a foot-shooting move (or even when you could use newfs instead). You reply with a workaround (which may be a valid way to deal, maybe not). My point still stands: it isn't always a foot-shooting move.

This is the only convincing argument against the proposed change that I've heard yet. I was assuming that doing this would cause something (e.g. the shell) to blow up even within a chroot, but I guess that isn't true, since all of the needed inodes will still be referenced until the shell exits.

I guess to make this feature justifiable under the ``you are definitely trying to shoot yourself in the foot'' criterion, it would need to be disabled in chrooted environments. AFAIK, there isn't a simple way to detect chrootedness from userland, so this is starting to sound like a much larger kludge than I originally thought...