freebsd-skq/sys/cddl/compat/opensolaris
Pawel Jakub Dawidek 12b9f8e47d Imagine situation where a security problem is found in setuid binary.
User upgrades his system to fix the problem, but if he has any ZFS snapshots
for the file system which contains problematic binary, any user can mount the
snapshot and execute vulnerable binary.

Prevent this from happening by always mounting snapshots with setuid turned off.

MFC after:	2 weeks
2011-05-31 07:02:49 +00:00
..
kern Imagine situation where a security problem is found in setuid binary. 2011-05-31 07:02:49 +00:00
rpc Our libc doesn't implement control method for XDR (only kernel does) and it 2009-08-20 00:05:29 +00:00
sys Don't access task structure once we call task function. 2011-05-24 20:07:15 +00:00