[lkml]   [2002]   [May]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: suid bit on directories
On Mon, 20 May 2002, Jesse Pollard wrote:

> > > No. You loose the fact that the file was NOT created by the user.
> >
> > the user in my example above would be wwwrun or httpd - and that does not
> > make any sense at all! It would make much more sense if the new files
> > belonged to the owner of the directory, who is the one who owns the
> > virtual host.
> You can't tell who the user is. ANY user would be able to do that.

Bzzzt. Only if the permissions permitted it.

Example 1:


public_html is user/group bob/httpd

the perms are 2770


Example 2:

All users on the system have a primary or secondary group "users"

/home/bob user/group bob/users

perms are 701

This explictly denies "users", yet allows Apache in (since it is running
as httpd).

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:26    [W:0.118 / U:2.004 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site