Disabling "symlink follow" feature on Ext3/4 mount points

Posted by Ali Nadalizadeh on Server Fault See other posts from Server Fault or by Ali Nadalizadeh
Published on 2010-04-26T20:29:08Z Indexed on 2010/04/26 20:33 UTC
Read the original article Hit count: 339

Filed under:

ext3

|

symbolic-link

|

linux

|

mount

How can I disable the symlink feature of ext3 file system mount point ? My server is being attacked by some sort of symbolic link hacking methods for reading other user's home directory. There is such an option "nosymfollow" on BSD series, but I didn't find the equivalent for Linux.

© Server Fault or respective owner

Related posts about ext3

RHEL - blocked FC remote port time out: saving binding

as seen on Server Fault - Search for 'Server Fault'
My Server went into a faulty state since the database could not write on the partition. I found out that the partition went into Read Only mode. Finally to fix it, I had to do a hard reboot. Linux 2.6.18-164.el5PAE #1 SMP Tue Aug 18 15:59:11 EDT 2009 i686 i686 i386 GNU/Linux /var/log/messages Oct… >>> More
Proper way to set permissions on an external disk's ext3 partition

as seen on Super User - Search for 'Super User'
I have a new external disk and just made an ext3 partition on it. I'm wondering what's the best way to set permissions on it (so that it's rw for certain users). I guess I could chmod ... /dev/sdb1 but I was thinking of a more dynamic way (kind of like uid= and gid= options for vfat and such). >>> More
ext3 slowing down on writes on linux 2.6.18

as seen on Server Fault - Search for 'Server Fault'
i'm running into a problem where writing to a file will cause a 5 to 15 second pause, this occurs only on writes. So far i have remounted the filesystem with data=writeback as an option, and set /sys/block/sdb/queue/max_sectors_kb to 64 to shorten the queue. Are there any other things i can try to… >>> More
Immutable hard links on ext3/4?

as seen on Server Fault - Search for 'Server Fault'
In my research on file versioning at the fs level, snapshotting, and related ideas, I took a look at hard-links and exactly what they are and how they behave. Using rsync you can get a pretty slick poor man's snapshotting system up and running on file systems that don't natively support it. But,… >>> More
problem when view the super block in ext3 file system

as seen on Super User - Search for 'Super User'
I tried to view the superblock by command "dd" in ext3 file system. dd if=/dev/sda3 bs=4096 skip=1 count=1 of=superblock But the result in superblock file is not correct(I compare the value of Inodes count I got from dumpe2fs). The device file /dev/sda3 is started at the boot block and then the… >>> More

Related posts about symbolic-link

How can I verify a symbolic link exists in CentOS

as seen on Server Fault - Search for 'Server Fault'
Normally, ls -la would give this to me but I guess CentOS is different. I need to verify that a symbolic link exists. >>> More
Could I use directory junctions (symbolic link) to share music between 2 users in Windows 7

as seen on Super User - Search for 'Super User'
I want to have 2 users be able to use the same itunes library and be able to sync an ipod which ever user is logged in. I tried making both the My Music folders point to the same folder, but that didn't work. One itunes would not store its library info in that folder. I was wondering if I could… >>> More
Symbolic Link in Tomcat 5 is not working after setting allowLinking="true"

as seen on Stack Overflow - Search for 'Stack Overflow'
I created a symbolic link to a .htm file. ln -sf /u105/app/ptelrep/reports/kfx/generated/KFX026_Wholesale_1.htm /u105/app/ptelrep/reports/kfx/generated/KFX026_Wholesale.htm The link works. I have the configuration file, reports.xml: /u355/app/ptelrep/tomcat50-jwsdp/conf/Catalina/localhost/reports… >>> More
Check if a file is real or a symbolic link

as seen on Stack Overflow - Search for 'Stack Overflow'
Is there a way to tell using C# if a file is real or a symbolic link? I've dug through the MSDN W32 docs (http://msdn.microsoft.com/en-us/library/aa364232(VS.85).aspx), and can't find anything for checking this. I'm using CreateSymbolicLink from here, and it's working fine. >>> More
Delete directory by referencing symbolic link

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
To set up the question, imagine this scenario: mkdir ~/temp cd ~/ ln -s temp temporary rm -rf temporary, rm -f temporary, and rm temporary each will remove the symbolic link but leave the directory ~/temp/. I have a script where the name of the symbolic link is easily derived but the… >>> More