lkml.org 
[lkml]   [2003]   [Oct]   [1]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: File Permissions are incorrect. Security flaw in Linux
On Wed, Oct 01, 2003 at 09:21:26PM +0200, DervishD wrote:

> If someone answers me something like "you are much of a dumb for
> understanding the answer, so I'll just tell you that you're wrong"
> (and believe me, that 'joke' about a well earned F in Unix 101 falls
> in this category IMHO), I wouldn't bother to thank...

You know, it's really not a joke. Permissions model and meanings of
individual permission bits *is* Unix 101 material and not knowing it
(let alone claiming behaviour contrary to reality) will, indeed, earn
you F.

To be completely blunt, original posting contained a lie. Given sequence
of operations had not been tried on "Sun Unix". At all. Everything else
would not get a reaction harsher than "you are thinking about behaviour
of directories with sticky bit set; without it write permissions on directory
are sufficient to remove files in it". Probably with reference to Unix FAQ
(and maybe a nitpick to the above - append-only and immutable files are
not removable).

9:1 says that all original poster had actually tried was rm /tmp/<something>
on Solaris, which, of course, resulted in "permission denied". The rest was
extrapolation. Which is not particulary endearing, to put it mildly.

The way original poster had reacted to replies ("You are all wrong,
I Know(tm)") + reference to Great Experience(tm)(r) had warranted the
rest, IMO.

And yes, we all screw up from time to time. Which is OK, provided that
when said screwup is noticed you admit it instead of throwing a temper
tantrum.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:49    [from the cache]
©2003-2011 Jasper Spaans. Advertise on this site