Messages in this thread | | | Subject | Re: chown and security | From | Andi Kleen <> | Date | 08 Feb 1998 08:18:21 +0100 |
| |
Andries.Brouwer@cwi.nl writes:
> Updating the man pages for system calls, I noticed > that we have an lchown these days. Hopefully everybody > is aware of the fact that every old chown(1) is now a > security risk on every recent Linux system. > ["chown -R foo /home/bar" will now change the ownership > of /etc/passwd if there was a symbolic link to that > under /home/bar.]
This is very bad. Perhaps the behaviour should be made an sysctl option, with the default to the old chown semantics.
Linus, would you accept a patch for that?
-Andi - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |