Messages in this thread |  | | Date | Wed, 13 Jan 1999 18:17:20 -0600 (CST) | | From | "Shawn K. Quinn" <> | | Subject | Re: odd chown difference between 2.0 and 2.1pre kernels |
| |
On Sun, 10 Jan 1999, Brandon S. Allbery KF8NH wrote:
| GAK!!! Security flaw here, methinks. chown should unconditionally clear | setuid and setgid.
While in a way I can somewhat see your reasoning, I disagree. If you're running chown on a file yet not really changing the owner or group (from root to root again as in this case) I see no problem with leaving setuid/setgid as they are. Unless, of course, I'm missing something.
-- Shawn K. Quinn - skquinn@southernaccess.net Posting from a fake address is letting the spammers win
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
|  |