From owner-freebsd-hackers Fri Oct 18 16:15:13 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id QAA00151 for hackers-outgoing; Fri, 18 Oct 1996 16:15:13 -0700 (PDT) Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.eu.org [193.56.58.253]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id QAA00135 for ; Fri, 18 Oct 1996 16:15:08 -0700 (PDT) Received: from brasil.brainstorm.eu.org (brasil.brainstorm.eu.org [193.56.58.33]) by mexico.brainstorm.eu.org (8.7.5/8.7.3) with ESMTP id BAA31805 for ; Sat, 19 Oct 1996 01:14:58 +0200 Received: (from uucp@localhost) by brasil.brainstorm.eu.org (8.6.12/8.6.12) with UUCP id BAA25978 for freebsd-hackers@FreeBSD.org; Sat, 19 Oct 1996 01:13:56 +0200 Received: (from roberto@localhost) by keltia.freenix.fr (8.8.0/keltia-uucp-2.9) id BAA26554; Sat, 19 Oct 1996 01:04:10 +0200 (MET DST) Message-Id: <199610182304.BAA26554@keltia.freenix.fr> Date: Sat, 19 Oct 1996 01:04:10 +0200 From: roberto@keltia.freenix.fr (Ollivier Robert) To: freebsd-hackers@FreeBSD.org Subject: Re: fix for symlinks in /tmp (fwd) FYI In-Reply-To: <199610181859.UAA14544@spooky.lss.cp.philips.com>; from Guido van Rooij on Oct 18, 1996 20:59:09 +0200 References: <199610181859.UAA14544@spooky.lss.cp.philips.com> X-Mailer: Mutt 0.47.13 Mime-Version: 1.0 X-Operating-System: FreeBSD 2.2-CURRENT ctm#2584 Sender: owner-hackers@FreeBSD.org X-Loop: FreeBSD.org Precedence: bulk > Sender: Bugtraq List > From: Andrew Tridgell > Subject: fix for symlinks in /tmp > To: Multiple recipients of list BUGTRAQ [...] > 1) the t bit is set on the directory containing the symlink > and > 2) the euid of the process does not match the owner of the symlink. This is not really applicable for 4.4BSD derived system as symlinks have no real owner except the directory's one (I'm still thinking that it is not good...). > The patch explicitly includes root, so root will not be able to follow > symlinks in /tmp unless it owns them. -- Ollivier ROBERT -=- The daemon is FREE! -=- roberto@keltia.freenix.fr FreeBSD keltia.freenix.fr 2.2-CURRENT #25: Tue Oct 15 21:13:57 MET DST 1996