[lkml]   [1996]   [Dec]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Proposal: restrict link(2)

[most of discussion on /tmp deleted...]

> My proposal would be to disallow linking a file into a directory which
> has the sticky bit set unless the owner of the file is attempting this.
> In other words, Joe Random Cracker can't do a 'ln /etc/passwd /tmp/foo'
> beforehand.
> Comments?

Have a look at the linux-security archives over the last month
or two. There was a whole discussion on the assorted insecurities
of /tmp and how we might go around fixing them.

Maybe even a patch or two :)

btw. Does this sound more like a linux-security issue than a
linux-kernel issue ???

> --
> Thomas Koenig,, ig25@dkauni2.bitnet.
> The joy of engineering is to find a straight line on a double
> logarithmic diagram.

Stuart Auchterlonie

 \ /
  Last update: 2005-03-22 13:38    [W:0.166 / U:0.368 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site