re: open()ing a directory without O_DIRECTORY

John Nemeth <[email protected]> Mon, 4 Mar 2019 00:29:23 -0800
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]>
On Mar 4,  8:47am, matthew green wrote:
}
} >  - zero out on unlink() so that the data is no longer on the disk
} >    (Everybody seems to have expressed preference for this solution but I
} >    think this requires changing all the affected filesystems)
} 
} actually, i don't like this idea at all.  it requires additional
} writes and it makes crash handling much harder later.  eg, fsdb
} will have much less useful data to work from.

     Where's the additional write?  You have to modify the directory
entry anyways to show that it is deleted.

} i really don't think it is worth making hard times harder.
} 
}-- End of excerpt from matthew green