lkml.org 
[lkml]   [1999]   [Jan]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: odd chown difference between 2.0 and 2.1pre kernels
Hi,

On Mon, 11 Jan 1999 15:40:02 +0000 (GMT), alan@lxorguk.ukuu.org.uk
(Alan Cox) said:

>> In message <19990109215152.C32046@kitenet.net>, Joey Hess writes:

>> GAK!!! Security flaw here, methinks. chown should unconditionally clear
>> setuid and setgid.

> Except when done by root

Is there any consensus on this? According to singleunix, suid and
sgid on regular files get cleared unconditionally except when the
caller has "appropriate privileges", but in that case the behaviour is
implementation-defined. What do other unixen do in this case?

--Stephen


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:49    [W:0.118 / U:0.140 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site