lkml.org 
[lkml]   [1996]   [Dec]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: Proposal: restrict link(2)
Date


[most of discussion on /tmp deleted...]

>
> My proposal would be to disallow linking a file into a directory which
> has the sticky bit set unless the owner of the file is attempting this.
> In other words, Joe Random Cracker can't do a 'ln /etc/passwd /tmp/foo'
> beforehand.
>
> Comments?

Have a look at the linux-security archives over the last month
or two. There was a whole discussion on the assorted insecurities
of /tmp and how we might go around fixing them.

Maybe even a patch or two :)

btw. Does this sound more like a linux-security issue than a
linux-kernel issue ???


> --
> Thomas Koenig, Thomas.Koenig@ciw.uni-karlsruhe.de, ig25@dkauni2.bitnet.
> The joy of engineering is to find a straight line on a double
> logarithmic diagram.
>


Regards,
Stuart Auchterlonie stuarta@foxln.com.au

\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.560 / U:0.028 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site