Perhaps this should be posted to other group
but I only have time to read this one + some local
ones ;).
OK, here is the beef.
Either I don't understand the concept of suid/sgid
(**very** possible) or there is something wrong.
Say root creates a script like follows:
cat $*
and sets it suid.
Now normal user could cut any r--.....
file with it, right? Well I (as normal user) get usuall
cat:foo not owner
where foo belongs to root and has r-------- perms.
Also root's script with:
echo "user ID" $UID
echo "effective user ID" $EUID
reports calling user's ID twice even when set sgid and x
for others.
Also my elm with root:mail ownership would't work right
even with suid. I had to sgid it too.
(It wouldn't be able to create folder in /usr/spool/mail
which is also root:mail).
On the other hand pcomm with suid set enables anyone to
become root just by jumping to subshell.
Any ideas?
(I'm using 0.96cpl2 w/o SCSI support).
--
/|| Numbers exist only in our minds. There is no physical entity that
||_is_ number 1. If there were, 1 would be in a place of honor in
|| some great museum of science, and past it would file a steady
==== stream of mathematicians gazing at 1 in wonder and awe.
| Linus Torvalds | Re: [REPORT] cfs-v4 vs sd-0.44 |
| Mariusz Kozlowski | [PATCH 02] kmalloc + memset conversion to kzalloc |
| Andi Kleen | [PATCH] [16/22] x86: Move swsusp __pa() dependent code to arch portion |
| Vegard Nossum | [RFC][PATCH] bitfields API |
git: | |
| Carl Worth | [PATCH] commit: Steer new users toward "git commit -a" rather than update-index |
| Wincent Colaiuta | Re: [ANNOUNCE] GIT 1.5.4 |
| Junio C Hamano | Re: Decompression speed: zip vs lzo |
| Nicolas Pitre | Re: cloning the kernel - why long time in "Resolving 313037 deltas" |
| Alexey Suslikov | OT: OpenBSD on Asus eeePC |
| Bertram Scharpf | First install: Grub doesn't find partitions |
| GVG GVG | ssh_exchange_identification: Connection closed by remote host |
| bsd_news | LC_COLLATE and PostgreSQL |
| David Miller | [PATCH]: Fix networking scatterlist regressions. |
| Indan Zupancic | Re: Realtek 8111C transmit timed out |
| Ilpo Järvinen | [RFC PATCH 6/8] [NET]: uninline skb_trim, de-bloats |
| Patrick McHardy | Re: [NETFILTER]: Introduce nf_inet_address |
