summaryrefslogtreecommitdiffstats
path: root/sbin/mount/mount.8
diff options
context:
space:
mode:
authorjulian <julian@FreeBSD.org>1997-11-13 00:28:51 +0000
committerjulian <julian@FreeBSD.org>1997-11-13 00:28:51 +0000
commitc931d11d3fc12ba491ad39463aa11df49dc1f688 (patch)
tree731c9e2cfdec42868e147077d821a150139c2303 /sbin/mount/mount.8
parent68d89b19d4172e0605feb73e4248bc41aec9a5f9 (diff)
downloadFreeBSD-src-c931d11d3fc12ba491ad39463aa11df49dc1f688.zip
FreeBSD-src-c931d11d3fc12ba491ad39463aa11df49dc1f688.tar.gz
Reviewed by: hackers@freebsd.org in general
Obtained from: Whistle Communications tree Add an option to the way UFS works dependent on the SUID bit of directories This changes makes things a whole lot simpler on systems running as fileservers for PCs and MACS. to enable the new code you must 1/ enable option SUIDDIR on the kernel. 2/ mount the filesystem with option suiddir. hopefully this makes it difficult enough for people to do this accidentally. see the new chmod(2) man page for detailed info.
Diffstat (limited to 'sbin/mount/mount.8')
-rw-r--r--sbin/mount/mount.818
1 files changed, 17 insertions, 1 deletions
diff --git a/sbin/mount/mount.8 b/sbin/mount/mount.8
index bda4ad1..4998b4a 100644
--- a/sbin/mount/mount.8
+++ b/sbin/mount/mount.8
@@ -30,7 +30,7 @@
.\" SUCH DAMAGE.
.\"
.\" @(#)mount.8 8.8 (Berkeley) 6/16/94
-.\" $Id: mount.8,v 1.18 1997/08/24 21:02:48 steve Exp $
+.\" $Id: mount.8,v 1.19 1997/09/27 13:44:12 kato Exp $
.\"
.Dd June 16, 1994
.Dt MOUNT 8
@@ -154,6 +154,22 @@ mount the file system read-only (even the super-user may not write it).
All
.Tn I/O
to the file system should be done synchronously.
+.It suiddir
+A directory on the mounted filesystem will respond to the SUID bit
+being set, by setting the owner of any new files to be the same
+as the owner of the directory.
+New directories will inherit the bit from their parents.
+Execute bits are removed from
+the file, and it will not be given to root.
+.Pp
+This feature is designed for use on fileservers serving PC users via
+ftp, SAMBA, or netatalk. It provides security holes for shell users and as
+such should not be used on shell machines, especially on home directories.
+This option requires the SUIDDIR
+option in the kernel to work. Only UFS filesystems support this option.
+See
+.Xr chmod 2
+for more information.
.It update
The same as
.Fl u ;
OpenPOWER on IntegriCloud