atom feed82 messages in org.freebsd.freebsd-hackersProtection from the dreaded "rm -fr /"
FromSent OnAttachments
Giorgos KeramidasOct 2, 2004 1:19 am 
Edwin GroothuisOct 2, 2004 1:33 am 
Michael ReifenbergerOct 2, 2004 1:34 am 
Giorgos KeramidasOct 2, 2004 1:39 am 
Giorgos KeramidasOct 2, 2004 1:51 am 
Ryan SommersOct 2, 2004 1:52 am 
Giorgos KeramidasOct 2, 2004 1:53 am 
Giorgos KeramidasOct 2, 2004 2:06 am 
Max LaierOct 2, 2004 2:24 am 
Giorgos KeramidasOct 2, 2004 3:19 am 
Greg BlackOct 2, 2004 3:57 am 
Ceri DaviesOct 2, 2004 4:22 am 
Ceri DaviesOct 2, 2004 4:25 am 
Max LaierOct 2, 2004 4:51 am 
Peter JeremyOct 2, 2004 5:43 am 
Dimitry AndricOct 2, 2004 7:48 am 
Simon L. NielsenOct 2, 2004 8:03 am 
Sean FarleyOct 2, 2004 8:41 am 
SamOct 2, 2004 8:54 am 
Jacques A. VidrineOct 2, 2004 9:46 am 
Tillman HodgsonOct 2, 2004 9:51 am 
Lee HarrOct 2, 2004 9:53 am 
Tillman HodgsonOct 2, 2004 9:55 am 
Giorgos KeramidasOct 2, 2004 10:10 am 
Giorgos KeramidasOct 2, 2004 10:55 am 
Giorgos KeramidasOct 2, 2004 10:56 am 
Tillman HodgsonOct 2, 2004 11:09 am 
Doug RussellOct 2, 2004 11:37 am 
David SchultzOct 2, 2004 11:50 am 
David SchultzOct 2, 2004 12:01 pm 
Michael ReifenbergerOct 2, 2004 12:16 pm 
Doug RussellOct 2, 2004 12:18 pm 
Michael ReifenbergerOct 2, 2004 12:26 pm 
Dmitry FrolovOct 2, 2004 12:37 pm 
Doug RussellOct 2, 2004 12:48 pm 
David SchultzOct 2, 2004 1:11 pm 
Michael ReifenbergerOct 2, 2004 1:49 pm 
Tillman HodgsonOct 2, 2004 2:05 pm 
Garance A DrosihnOct 2, 2004 2:22 pm 
Ceri DaviesOct 2, 2004 3:00 pm 
sor...@cydem.orgOct 2, 2004 3:11 pm 
Giorgos KeramidasOct 2, 2004 4:28 pm 
Giorgos KeramidasOct 2, 2004 4:28 pm 
David SchultzOct 2, 2004 5:19 pm 
M. Warner LoshOct 2, 2004 6:26 pm 
M. Warner LoshOct 2, 2004 6:28 pm 
M. Warner LoshOct 2, 2004 6:29 pm 
Giorgos KeramidasOct 2, 2004 6:53 pm 
Thomas David RiversOct 2, 2004 6:53 pm 
M. Warner LoshOct 2, 2004 7:07 pm 
Doug RussellOct 2, 2004 7:11 pm 
Tillman HodgsonOct 2, 2004 8:09 pm 
Tillman HodgsonOct 2, 2004 8:11 pm 
David SchultzOct 2, 2004 11:31 pm 
Sam LawranceOct 3, 2004 12:35 am 
Chris HowellsOct 3, 2004 5:07 am 
Mike MeyerOct 3, 2004 5:07 am 
Mike MeyerOct 3, 2004 5:07 am 
M. Warner LoshOct 3, 2004 10:37 am 
Greg ShenautOct 3, 2004 11:14 am 
Dmitry MorozovskyOct 3, 2004 11:28 am 
Thomas SparrevohnOct 3, 2004 11:40 am 
Dag-Erling SmørgravOct 3, 2004 1:33 pm 
Roman NeuhauserOct 3, 2004 2:59 pm 
M. Warner LoshOct 3, 2004 6:38 pm 
Mark MurrayOct 4, 2004 1:10 am 
Dmitry KarasikOct 4, 2004 3:15 am 
Dave HorsfallOct 4, 2004 3:27 am 
Giorgos KeramidasOct 4, 2004 3:49 am 
Stijn HoopOct 4, 2004 4:52 am 
Ceri DaviesOct 4, 2004 5:33 am 
Søren SchmidtOct 4, 2004 5:43 am 
Chris HowellsOct 4, 2004 6:16 pm 
Chris DillonOct 5, 2004 8:36 am 
SamOct 5, 2004 9:03 am 
Giorgos KeramidasOct 5, 2004 5:12 pm 
Giorgos KeramidasOct 5, 2004 5:42 pm 
Matthew DillonOct 5, 2004 6:30 pm 
Matthew DillonOct 5, 2004 6:56 pm 
Matthew DillonOct 5, 2004 11:39 pm 
Thomas SparrevohnOct 6, 2004 12:49 pm 
Lyndon NerenbergOct 28, 2004 5:31 am 
Subject:Protection from the dreaded "rm -fr /"
From:Michael Reifenberger (mi@Reifenberger.com)
Date:Oct 2, 2004 1:49:34 pm
List:org.freebsd.freebsd-hackers

On Sat, 2 Oct 2004, David Schultz wrote:

Date: Sat, 2 Oct 2004 16:12:11 -0400 From: David Schultz <da@FreeBSD.ORG> To: Michael Reifenberger <mi@Reifenberger.com> Cc: free@FreeBSD.ORG Subject: Re: Protection from the dreaded "rm -fr /"

On Sat, Oct 02, 2004, Michael Reifenberger wrote:

On Sat, 2 Oct 2004, David Schultz wrote: ...

Do you also want to be able to swap to the root partition while it's mounted? We can bring back that feature, too. But personally, I don't see anything wrong with the view that operations that are guaranteed to shoot people in the foot should be disallowed.

Every anti foot shooting takes time to check for. A strncmp for every arg is maybe ok. Traversing the tree for realpath is not. The job for `rm` is to remove whatever it is given to get removed. As fast as possible. Nothing else.

Sigh. The original patch that just used strcmp() wouldn't have increased the time to execute rm by more than a few hundred nanoseconds.

Wasn't there a discussion recently to increase ARG_MAX...? :-)

Bye/2