9fans archive / 1997 / 08 / 13 /    prev next

From: beto@ncu... beto@ncu...
Subject: [9fans] /srv modes
Date: Thu, 14 Aug 97 10:53:35 PDT

Hi, 

I got a question about /srv/foo access permision. 

When you create a file onto /srv to post a fd, the modes 
you specify during the create are not relate to the modes
that are checked during open.
During the open the modes that are check are the modes
on the referenced channel, and it check only for OREAD/OWRITE.

This makes some sense for 9P connection to servers that
provides authentication but it's a problem if you want to
do something else. 

For example, it would be nice if I could post a fd for processes
running under the same uid to share. For example I could 
create the file with 600, so only processes with my
uid can read/write to it.

Will it brake something if I changed devsrv.c to check first for
permission on the file and then permission on the channel?

Most fd are posted 666 (/srv/nfsserver.chat uses 600) so
they shouldn't be affected????

Any comment would be appreciated?