Christoph Hellwig wrote:
On Thu, Nov 13, 2008 at 01:08:58PM +0300, Pavel Shilovsky wrote:
quoted
We suggest to switch on this flags with special options during mounting.
By default, it'll be switch off.
This solution deletes possibility of such situations, like in example.
Sorry, having completely weird open modes only for one filesystem, and
only depending on mount options is not very nice to the user.
And options or not allowing the above functionality for regular users
is a security issue.
A generic mount option is currently used for mandatory locking - this
is very similar.
The only different I see, for security, is with mandatory locking a
process which doesn't want to get stuck can check the permission bits
before opening a file. But I'm not aware of anything actually doing this.
-- Jamie