lkml.org 
[lkml]   [1996]   [Dec]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Proposal: restrict link(2)

Marek Michalkiewicz writes:
>
> Theodore Y. Ts'o:
> > Someone in Devel can trivial give write access to Beta Report merely by
> > leaving a setgid devel program in their homedirectory.
>
> I don't see any good reasons why ordinary users should be allowed
> to set set[ug]id bits. Perhaps that should be disallowed (at least
> as an option)? Would it break any standards?

Yikes! No!!!! There are good reasons why users should be able to set
the uid/gid bits on files they own (remember: set-uid is set to the ID
of the *owner* of the file, not necessarily set-uid to root).
This whole thread is getting ridiculous! People are beginning to
suggest disabling legitimate features left, right and centre!
Let's be a little more creative. Please.

Regards,

Richard....

\
 
 \ /
  Last update: 2005-03-22 13:38    [W:0.038 / U:0.344 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site