SuSe 10.1 and filePro 5.0.14D4

Bill Campbell bill at celestial.com
Tue Jul 18 13:31:33 PDT 2006


On Tue, Jul 18, 2006, Jay R. Ashworth wrote:
>On Tue, Jul 18, 2006 at 12:45:33PM -0400, Kenneth Brody wrote:
>> The problem is that chown will reset the setuid bit.  This is for
>> security reasons, to prevent the setuid bit from applying to the
>> new uid, and is probably documented on the chown man page.
>> 
>> As I recall, a non-root user used to be able to chown a file that
>> he owned to another uid.  Ignoring the disk quota implications,
>> imagine creating an executable, setting the setuid bit, and then
>> chowning it to root.  I believe that this "feature" of chown is
>> disallowed nowadays as well.
>
>I'm pretty sure that the "chown clears the SUID bit" fix happened way
>back in v7, and hasn't been seen since...  I could check my paper v7
>manuals (damn, that was the most fun $75 I ever spent when I was 16;
>yes, I'm a geek).

Didn't we have this discussion several months ago on this list?

Bill
--
INTERNET:   bill at Celestial.COM  Bill Campbell; Celestial Software LLC
URL: http://www.celestial.com/  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676

``During times of universal deceit, telling the truth becomes
a revolutionary act.''  --George Orwell


More information about the Filepro-list mailing list