lkml.org 
[lkml]   [1999]   [May]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectSecurity bug: mkdir removes the sticky bit
Security bug: mkdir removes the sticky bit

There is a security bug in mkdir:

> mkdir -m 1777 /tmp/foo
> ls -l /tmp
drwxrwxrwx 2 root root 1024 May 14 19:44 foo

The sticky bit is missing.

> strace mkdir -m 1777 /tmp/foo |& grep mkdir
mkdir("/tmp/foo", 01777) = 0

So it looks to be really kernel related.

[I had fixed it in 2.0 ...]

Another (minor) problem with the frame buffer dev:
1)
> setfont -m <map> <font>
changes the font for all ttys but the map is changed for the current tty only.
[Kernel related ?]

2)
fbset changes the current tty only. How can I change all ttys ?
[Kernel related ?]


-- Versions installed: (if some fields are empty or looks
-- unusual then possibly you have very old versions)
Linux [...] 2.2.8 [...]
Kernel modules 2.1.121
Gnu C egcs-2.91.66
Binutils 2.9.1
Linux C Library 2.1.1
Dynamic linker ldd (GNU libc) 2.1.1
Procps 2.0.2
Mount 2.9g
Net-tools 2.01
Kbd 0.96
Sh-utils 1.16
Modules Loaded sound soundcore

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:51    [W:0.033 / U:0.108 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site