lkml.org 
[lkml]   [1997]   [Feb]   [23]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
From(Harald Koenig)
SubjectRe: NFS bug ?!
DateSun, 23 Feb 1997 03:01:02 +0100 (MET)
> Two points.  One: NFS's fundamental security flaws have been known for
> quite some time.  Two: your example is silly, because root could
> also access USER's files by su'ing to USER.

I didn't say that this is a security issue.  obviously root can SUID "user" to
access user's files.


I would like to

- know what's the reason and idea that this open() call succeeds for root

- avoid corrupt/incomplete data if root tries to copy such files!
  either the file should be accessible and copies entirely or not at all IMHO.



Harald
--
All SCSI disks will from now on                     ___       _____
be required to send an email notice                0--,|    /OOOOOOO\
24 hours prior to complete hardware failure!      <_/  /  /OOOOOOOOOOO\
                                                    \  \/OOOOOOOOOOOOOOO\
                                                      \ OOOOOOOOOOOOOOOOO|//
Harald Koenig,                                         \/\/\/\/\/\/\/\/\/
Inst.f.Theoret.Astrophysik                              //  /     \\  \
koenig@tat.physik.uni-tuebingen.de                     ^^^^^       ^^^^^
\
 
 \ /
  Last update: 2005-03-22 13:39    [W:0.241 / U:0.190 seconds]
©2003-2008 Jasper Spaans