Re: FS possible security exposure ?

From: Wichert Akkerman
Date: Sun Dec 25 2005 - 05:17:03 EST


Previously regatta wrote:
> but if you think about it, how could the system allow the user to
> modify a file that he don't own it and he don't have write privilege
> on the file just because he has write in the parent directory ?

As Arjan explained you are not modifying the file. vim just removes it
and replaces it with a new one.

> Maybe I'm wrong, but is this normal ? please let me know

It is, ans solaris does the same thing.

> BTW: is there any document, article or any page about this so I can
> show it to my boss :)

Any decent posix/unix manual should do.

Wichert.

--
Wichert Akkerman <wichert@xxxxxxxxx> It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/