diff options
author | Martin Pärtel <martin.partel@gmail.com> | 2012-09-15 16:06:00 +0300 |
---|---|---|
committer | Martin Pärtel <martin.partel@gmail.com> | 2012-09-15 16:06:00 +0300 |
commit | 04e70e1b760535bf2860130cc4c69d31702e28c7 (patch) | |
tree | 4f0827e0b2ec8b0b4d6c203c10e2a3d8c2b68786 /src/bindfs.1 | |
parent | 086cab2b43c1abb603f7da32df663852cad81262 (diff) | |
download | bindfs-04e70e1b760535bf2860130cc4c69d31702e28c7.tar.gz |
Be single-threaded by default. Documented a race condition.
Diffstat (limited to 'src/bindfs.1')
-rw-r--r-- | src/bindfs.1 | 25 |
1 files changed, 18 insertions, 7 deletions
diff --git a/src/bindfs.1 b/src/bindfs.1 index cd822bc..b420f21 100644 --- a/src/bindfs.1 +++ b/src/bindfs.1 @@ -239,6 +239,12 @@ The underlying file's ctime will still be updated normally. .B \-\-hide-hard-links, \-o hide-hard-links Shows the hard link count of all files as 1. +.TP +.B \-\-multithreaded, \-o multithreaded +Run bindfs in multithreaded mode. While bindfs is designed to be +otherwise thread-safe, there is currently a race condition that may pose +a security risk for some use cases. See \fB\%BUGS\fP below. + .SH FUSE OPTIONS .TP @@ -260,10 +266,6 @@ Enable debug output (implies \-f). .B \-f Foreground operation. -.TP -.B \-s -Disable multithreaded operation. bindfs should be thread-safe. - .SH PERMISSION SPECIFICATION The \fB\-p\fP option takes a comma\- or colon\-separated list of either octal @@ -349,13 +351,22 @@ MacFuse caches file contents by default. This means that changes in source files are not always immediately visible under the mount point. \fB\-o nolocalcaches\fP can be used to disable the cache. -When using \fB\-\-mirror[-only]\fP on a group, bindfs won't see changes to the group's member list. +When using \fB\-\-mirror[-only] @somegroup\fP, bindfs won't see changes to the group's member list. Sending bindfs a \fBSIGUSR1\fP signal will make it reread the user database. .SH BUGS -Please report to the issue tracker on the project home page at -http://code.google.com/p/bindfs/ +If bindfs is run in multithreaded mode (with the +\fB\-\-multithreaded\fP option) then it's possible for another process +to briefly see a file with an incorrect owner, group or permissions. +This may constitute a security risk if you rely on bindfs to reduce +permissions on new files. For this reason, as of version 1.11 +bindfs runs in single-threaded mode by default. + +Please report bugs to the issue tracker on the project home page at +\fBhttp://code.google.com/p/bindfs/\fP +Send patches as pull requests to \fBhttps://github.com/mpartel/bindfs\fP or +by e-mail to \fBmartin dot partel at gmail dot com\fP. .SH AUTHOR |