diff options
author | Miklos Szeredi <miklos@szeredi.hu> | 2004-07-24 19:56:16 +0000 |
---|---|---|
committer | Miklos Szeredi <miklos@szeredi.hu> | 2004-07-24 19:56:16 +0000 |
commit | 209f5d053bae91fe404a0d08aaf5bb0be1d614f0 (patch) | |
tree | 79d20999e8e392c5231894d52d69a0ead679a421 /ChangeLog | |
parent | d66d3947d5d4fdda0bdde3f5299553673d4ee64e (diff) | |
download | libfuse-209f5d053bae91fe404a0d08aaf5bb0be1d614f0.tar.gz |
security fixes + other enhancements
Diffstat (limited to 'ChangeLog')
-rw-r--r-- | ChangeLog | 22 |
1 files changed, 19 insertions, 3 deletions
@@ -1,8 +1,24 @@ 2004-07-24 Miklos Szeredi <miklos@szeredi.hu> - * Make the non-user mounting more secure by changing the current - directory to the mountpoint before checking the permissions and - mounting on "." after this + * 'large_read' mount option removed for 2.6 kernels, since the + default (dynamic read size) is better + + * Extend kernel API with file handles. A file handle is returned + by open, and passed to read, write, flush, fsync and release. + This is currently only used for debug output in the library. + + * Security changes: + + * Change the current directory to the mountpoint before checking + the permissions and mount filesystem on "." + + * By default don't modprobe the fuse module for non-root. The old + behavior can be restored with the '--enable-auto-modprobe' flag of + ./configure + + * By default don't allow shared writable mappings for non-root. + The old behavior can be restored with the 'user_mmap=1' module + parameter 2004-07-23 Miklos Szeredi <miklos@szeredi.hu> |