Article View: comp.std.unix
Article #13Re: chown and chmod u+s: Security Violation - why ?
From: Michael I Bushnell
Date: Mon, 03 Aug 1992 23:35
Date: Mon, 03 Aug 1992 23:35
22 lines
1350 bytes
1350 bytes
Submitted-by: mib@geech.gnu.ai.mit.edu (Michael I Bushnell) In article <15ibqsINNc3a@ftp.UU.NET> toon@moene.indiv.nluug.nl (Toon Moene) writes: Short question: Why is it considered a security risk when people give away their own files (by chown'ing them to someone else) or setuid 'user' their own executables (OK, they have to be careful here) ? There is no security hole involved in letting people do setuid on their own files. Giving away files defeats most quota schemes, which is the usual reason for prohibiting it. -- Michael I. Bushnell | Benedictus qui venit +1 617 625 4518 (H) -+- in +1 617 253 8568 (W) | Nomine mib@gnu.ai.mit.edu | Domini Volume-Number: Volume 28, Number 75
Technical Details
Message-ID:
<15kfsaINN4bu@ftp.UU.NET>Path:
arc1-ca.pugleaf.net!sparky!uunet!uunet!not-for-mailReferences:
<15ibqsINNc3a@ftp.UU.NET>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!uunet!not-for-mail From: mib@geech.gnu.ai.mit.edu (Michael I Bushnell) Newsgroups: comp.std.unix Subject: Re: chown and chmod u+s: Security Violation - why ? Date: 3 Aug 1992 16:35:38 -0700 Organization: Free Software Foundation, Cambridge, MA Lines: 22 Sender: sef@ftp.UU.NET Approved: sef@ftp.uucp (Moderator, Sean Eric Fagan) Message-ID: <15kfsaINN4bu@ftp.UU.NET> References: <15ibqsINNc3a@ftp.UU.NET> NNTP-Posting-Host: ftp.uu.net X-Submissions: std-unix@uunet.uu.net