Re: Vixie/ISC Cron group crontab to root escalation

[Jakub Wilk <jwilk () jwilk net>]

* Fiedler Roman <Roman.Fiedler () ait ac at>, 2017-06-13, 07:45:
> > > Thanks, perhaps a comment in the code can't hurt...
> > > Or even O_NODEV which does not exist, or O_PATH (linux only)..
> >
> > As there is a O_DIRECTORY it would be more orthogonal to have O_REGULAR (open 
> > only a regular file). But that becomes more and more icky as we're running 
> > out of 32 bits of O_*)
>
> Why not stop that at all and have an O_POLICY,

With help of O_PATH, you can implement almost any sanity check in userspace.
No need to reinvent this particular wheel.

--
Jakub Wilk