lkml.org 
[lkml]   [1999]   [Jan]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: odd chown difference between 2.0 and 2.1pre kernels
On Sun, 10 Jan 1999, Brandon S. Allbery KF8NH wrote:

| GAK!!! Security flaw here, methinks. chown should unconditionally clear
| setuid and setgid.

While in a way I can somewhat see your reasoning, I disagree. If you're
running chown on a file yet not really changing the owner or group (from
root to root again as in this case) I see no problem with leaving
setuid/setgid as they are. Unless, of course, I'm missing something.

--
Shawn K. Quinn - skquinn@southernaccess.net
Posting from a fake address is letting the spammers win


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:49    [from the cache]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and my Meterkast|Read the blog