Re: root-owned world-writable files

Article View: comp.security.misc

Article #180

Back to comp.security.misc Previous Next

#180

From: Timothy Newsham
Date: Fri, 24 Jul 1992 04:52

7 lines
1083 bytes

root owned world writeable files can be a problem on systems without
chown...  the problem is that a user who has a world writeable directory
could be invaded by writing the root file, and linking they guys dot files
to it.  The security mechanism to stop such acts is that the file must be
owned by root or the person whos home directory it is (ie. .rhosts).
The guy shouldnt have a world writeable home directory in the first place 
anway...

Technical Details

Message-ID: <1992Jul24.045249.19932@news.Hawaii.Edu>

Path:

arc1-ca.pugleaf.net!sparky!uunet!usc!sdd.hp.com!swrinde!elroy.jpl.nasa.gov!ames!news.hawaii.edu!wiliki.eng.hawaii.edu!newsham

References:

<1992Jul21.201056.662@newshost.lanl.gov> <14htt0INNiep@hilbert.math.ksu.edu> <1992Jul22.153044.5242@jarvis.csri.toronto.edu>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!usc!sdd.hp.com!swrinde!elroy.jpl.nasa.gov!ames!news.hawaii.edu!wiliki.eng.hawaii.edu!newsham
From: newsham@wiliki.eng.hawaii.edu (Timothy Newsham)
Newsgroups: comp.security.misc
Subject: Re: root-owned world-writable files
Message-ID: <1992Jul24.045249.19932@news.Hawaii.Edu>
Date: 24 Jul 92 04:52:49 GMT
References: <1992Jul21.201056.662@newshost.lanl.gov> <14htt0INNiep@hilbert.math.ksu.edu> <1992Jul22.153044.5242@jarvis.csri.toronto.edu>
Sender: root@news.Hawaii.Edu (News Service)
Organization: University of Engineering, College of Engineering
Lines: 7
Nntp-Posting-Host: wiliki.eng.hawaii.edu

Reply to Parent Message