[OpenAFS] Re: [OpenAFS-devel] Re: Thinking about 1.6
Simon Wilkinson
sxw@inf.ed.ac.uk
Wed, 16 Dec 2009 23:25:05 +0000
On 16 Dec 2009, at 23:03, Jeffrey Hutzelman wrote:
> --On Wednesday, December 16, 2009 01:46:04 PM -0500 Derrick Brashear
> <shadow@gmail.com> wrote:
>
>> bos exec still works unless you give the restricted command line
>> switch. if you turn on random options without reading what you're
>> doing, you get what you paid for.
>
> Perhaps you missed the part where Simon advocated making the new
> behavior the default?
Even if bos restricted is enabled at compile time, you don't see any
changes unless you run bos setrestricted against a bos server. That's
what I'm advocating - making all bosserver binaries (and all bos
clients) support restricted mode, but _not_ enabling it by default at
run time.
S.