diff options
| author | Nicolas Vigier <boklm@mageia.org> | 2013-04-14 13:46:12 +0000 |
|---|---|---|
| committer | Nicolas Vigier <boklm@mageia.org> | 2013-04-14 13:46:12 +0000 |
| commit | 1be510f9529cb082f802408b472a77d074b394c0 (patch) | |
| tree | b175f9d5fcb107576dabc768e7bd04d4a3e491a0 /zarb-ml/mageia-dev/2011-August/007251.html | |
| parent | fa5098cf210b23ab4f419913e28af7b1b07dafb2 (diff) | |
| download | archives-master.tar archives-master.tar.gz archives-master.tar.bz2 archives-master.tar.xz archives-master.zip | |
Diffstat (limited to 'zarb-ml/mageia-dev/2011-August/007251.html')
| -rw-r--r-- | zarb-ml/mageia-dev/2011-August/007251.html | 173 |
1 files changed, 173 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2011-August/007251.html b/zarb-ml/mageia-dev/2011-August/007251.html new file mode 100644 index 000000000..79a5c4f7d --- /dev/null +++ b/zarb-ml/mageia-dev/2011-August/007251.html @@ -0,0 +1,173 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] RM replacement + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20RM%20replacement&In-Reply-To=%3C4E3BE8E4.9050009%40laposte.net%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="007243.html"> + <LINK REL="Next" HREF="007252.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] RM replacement</H1> + <B>andre999</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20RM%20replacement&In-Reply-To=%3C4E3BE8E4.9050009%40laposte.net%3E" + TITLE="[Mageia-dev] RM replacement">andr55 at laposte.net + </A><BR> + <I>Fri Aug 5 14:58:12 CEST 2011</I> + <P><UL> + <LI>Previous message: <A HREF="007243.html">[Mageia-dev] RM replacement +</A></li> + <LI>Next message: <A HREF="007252.html">[Mageia-dev] RM replacement +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#7251">[ date ]</a> + <a href="thread.html#7251">[ thread ]</a> + <a href="subject.html#7251">[ subject ]</a> + <a href="author.html#7251">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>Colin Guthrie a écrit : +><i> 'Twas brillig, and andre999 at 05/08/11 06:50 did gyre and gimble: +</I>>><i> Luis Daniel Lucio Quiroz a écrit : +</I>>>><i> Le Jeudi 04 Août 2011 18:39:35 andre999 a écrit : +</I>>>>><i> Luis Daniel Lucio Quiroz a écrit : +</I>>>>>><i> Helo, +</I>>>>>><i> +</I>>>>>><i> As my experience in security field, to make Mageia more available in +</I>>>>>><i> enterprise environments, and specially those that are security +</I>>>>>><i> paranoid, i'm planning to port SRM. SRM is a package that does a +</I>>>>>><i> "secure" file deleting according some security standards (i dont +</I>>>>>><i> remember right now names, i guess it is something in NIST, but that +</I>>>>>><i> doesnt matter really). +</I>>>>>><i> +</I>>>>>><i> My question is, what should be the procedure that when you install srm, +</I>>>>>><i> then the normal rm command could be replaced? i was thinking in +</I>>>>>><i> pushing an alias but what other alternatives do i have? +</I>>>>>><i> +</I>>>>>><i> please comment, +</I>>>>>><i> +</I>>>>>><i> LD +</I>>>>><i> +</I>>>>><i> At first glance that sounds like a reasonable approach EXCEPT -- a +</I>>>>><i> system-level alias would be over-ridden by a user alias. +</I>>>>><i> A user could innocently have an alias such as : +</I>>>>><i> alias rm="rm -i" +</I>>>>><i> +</I>>>>><i> rm is in /bin +</I>>>>><i> - /bin/rm could be replaced with a link to srm, but I don't know if that +</I>>>>><i> would be considered acceptable. +</I>>>>><i> rm would have to be restored if srm were uninstalled +</I>>>>><i> +</I>>>>><i> - wouldn't a link in /usr/bin/rm be executed first ? +</I>>>>><i> Of course that doesn't cover execution with root privileges. +</I>>>>><i> An alias in root wouldn't necessarily work, as an admin could +</I>>>>><i> inadvertantly +</I>>>>><i> replace it with another. (By loading a new file with some changed +</I>>>>><i> alias, +</I>>>>><i> for example.) +</I>>>>><i> But probably less likely than some user doing the same on their profile. +</I>>>>><i> +</I>>>>><i> There could be other approaches as well ... :) +</I>>>><i> +</I>>>><i> You are right! :) +</I>>>><i> +</I>>>><i> Well another option could be this: +</I>>>><i> +</I>>>><i> a. we change coreutils to install /bin/rm as /bin/rm.vanilla (or +</I>>>><i> other name, +</I>>>><i> that really doesnt matter), +</I>>>><i> b. i change srm to install itself in /bin instead of /usr/bin +</I>>>><i> c. we place alternatives in both packages to provide /bin/rm, giving +</I>>>><i> preference to srm if installed, otherwise it will use rm of coreutils +</I>>>><i> +</I>>>><i> LD +</I>>><i> +</I>>><i> That would probably be the ideal approach. But it might take a while to +</I>>><i> get the changes accepted in coreutils. +</I>>><i> +</I>>><i> Maybe it could be all done from srm ? +</I>>><i> On srm install, +</I>>><i> a. rename /bin/rm to /bin/rm.vanilla (or rm.original or ?) +</I>>><i> b. create /bin/rm link to /bin/srm +</I>><i> +</I>><i> Definitely not. It's against the commandments: Thou shalt not mess with +</I>><i> another packages' files. +</I> +ok. I suspected that. +It would be nice to have a list of these points for newer packagers. + +>><i> On srm uninstall, we ensure that +</I>>><i> a. rm /bin/rm link +</I>>><i> b. rename /bin/rm.vanilla to /bin/rm +</I>>><i> +</I>>><i> Hopefully that could be done reliably, with an uninstall script. +</I>><i> +</I>><i> No, this is very bad. +</I>><i> +</I>><i> It's what the alternatives system was designed to do for you, but I +</I>><i> really don't think that something as fundamental as rm should be messed +</I>><i> with in this way as I mentioned in my own email. +</I>><i> +</I>><i> srm is an add on userspace tool. To implement secure deletes properly, +</I>><i> you would want support at a lower level (i.e in the kernel/fs). +</I> +makes sense. + +><i> I think srm should just be a tool people use explicitly when they want to. +</I> +When I think about it, deleting with a pattern instead of just zeros is +probably only advantageous when a disk is being disposed of -- in which case +srm being a userspace tool is not a disadvantage. + +><i> Col +</I>><i> +</I> +-- +André +</PRE> + + + + + + + + + + + + + + + + + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="007243.html">[Mageia-dev] RM replacement +</A></li> + <LI>Next message: <A HREF="007252.html">[Mageia-dev] RM replacement +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#7251">[ date ]</a> + <a href="thread.html#7251">[ thread ]</a> + <a href="subject.html#7251">[ subject ]</a> + <a href="author.html#7251">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |