From 209f5d053bae91fe404a0d08aaf5bb0be1d614f0 Mon Sep 17 00:00:00 2001 From: Miklos Szeredi Date: Sat, 24 Jul 2004 19:56:16 +0000 Subject: security fixes + other enhancements --- ChangeLog | 22 +++++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 0e22882..01885b9 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,8 +1,24 @@ 2004-07-24 Miklos Szeredi - * Make the non-user mounting more secure by changing the current - directory to the mountpoint before checking the permissions and - mounting on "." after this + * 'large_read' mount option removed for 2.6 kernels, since the + default (dynamic read size) is better + + * Extend kernel API with file handles. A file handle is returned + by open, and passed to read, write, flush, fsync and release. + This is currently only used for debug output in the library. + + * Security changes: + + * Change the current directory to the mountpoint before checking + the permissions and mount filesystem on "." + + * By default don't modprobe the fuse module for non-root. The old + behavior can be restored with the '--enable-auto-modprobe' flag of + ./configure + + * By default don't allow shared writable mappings for non-root. + The old behavior can be restored with the 'user_mmap=1' module + parameter 2004-07-23 Miklos Szeredi -- cgit v1.2.3