Re: [PATCH 5/9] netfilter: xt_recent: allow changing ip_list_[ug]id at runtime

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jan Engelhardt wrote:
> On Tuesday 2010-03-23 15:18, Patrick McHardy wrote:
>   
>>>  module_param(ip_list_perms, uint, 0400);
>>> -module_param(ip_list_uid, uint, 0400);
>>> -module_param(ip_list_gid, uint, 0400);
>>> +module_param(ip_list_uid, uint, S_IRUGO | S_IWUSR);
>>> +module_param(ip_list_gid, uint, S_IRUGO | S_IWUSR);
>>>  MODULE_PARM_DESC(ip_list_tot, "number of IPs to remember per list");
>>>  MODULE_PARM_DESC(ip_pkt_list_tot, "number of packets per IP address to remember (max. 255)");
>>>  MODULE_PARM_DESC(ip_list_hash_size, "size of hash table used to look up IPs");
>>>  MODULE_PARM_DESC(ip_list_perms, "permissions on /proc/net/xt_recent/* files");
>>> -MODULE_PARM_DESC(ip_list_uid,"owner of /proc/net/xt_recent/* files");
>>> -MODULE_PARM_DESC(ip_list_gid,"owning group of /proc/net/xt_recent/* files");
>>> +MODULE_PARM_DESC(ip_list_uid, "default owner of /proc/net/xt_recent/* files");
>>> +MODULE_PARM_DESC(ip_list_gid, "default owning group of /proc/net/xt_recent/* files");
>>>       
>> So what will be updating the permissions of the existing proc files?
>>     
>
> The administrator with the use of chmod/chown/chgrp.
>   
I'm not sure whether this will have the desired effect. I vaguely recall
that
proc used to forget about permission changes. That might have been
fixed, but
I was unable to find something in the changelogs.

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux