From owner-freebsd-stable@FreeBSD.ORG Sun Oct 26 10:43:10 2008 Return-Path: Delivered-To: freebsd-stable@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E8B63106569A for ; Sun, 26 Oct 2008 10:43:10 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from mail-gw0.york.ac.uk (mail-gw0.york.ac.uk [144.32.128.245]) by mx1.freebsd.org (Postfix) with ESMTP id 804458FC1C for ; Sun, 26 Oct 2008 10:43:10 +0000 (UTC) (envelope-from gavin@FreeBSD.org) Received: from mail-gw6.york.ac.uk (mail-gw6.york.ac.uk [144.32.129.26]) by mail-gw0.york.ac.uk (8.13.6/8.13.6) with ESMTP id m9QAh5pC008480; Sun, 26 Oct 2008 10:43:05 GMT Received: from ury.york.ac.uk ([144.32.108.81]) by mail-gw6.york.ac.uk with esmtps (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1Ku35N-0005hj-H8; Sun, 26 Oct 2008 10:43:05 +0000 Received: from ury.york.ac.uk (localhost.york.ac.uk [127.0.0.1]) by ury.york.ac.uk (8.14.3/8.14.3) with ESMTP id m9QAh4J3093606; Sun, 26 Oct 2008 10:43:04 GMT (envelope-from gavin@FreeBSD.org) Received: from localhost (gavin@localhost) by ury.york.ac.uk (8.14.3/8.14.3/Submit) with ESMTP id m9QAh4kD093596; Sun, 26 Oct 2008 10:43:04 GMT (envelope-from gavin@FreeBSD.org) X-Authentication-Warning: ury.york.ac.uk: gavin owned process doing -bs Date: Sun, 26 Oct 2008 10:43:04 +0000 (GMT) From: Gavin Atkinson X-X-Sender: gavin@ury.york.ac.uk To: Yannick Cadin In-Reply-To: Message-ID: <20081026103133.B42478@ury.york.ac.uk> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-York-MailScanner: Found to be clean X-York-MailScanner-From: gavin@freebsd.org Cc: freebsd-stable@FreeBSD.org Subject: Re: 2 (very old) bugs? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 26 Oct 2008 10:43:11 -0000 On Sun, 26 Oct 2008, Yannick Cadin wrote: > - first in the stat command. Only with the -x option. If you execute stat -x > on /tmp or /usr/bin/passwd parameters for example, the numeric representation > of mode is wrong. The "special" bits are always 0. No suid-bit, no sticky > bit! Although this does seem wrong to me, the code does it deliberately. I'm not sure why, it may be to be compatible with Linux (as the -x option is documented in the man page as giving "Linux format" output). > - Second. Because of a missing suid-bit on the newgrp command, this one is > not really usable for users other than root. This is deliberate, and is docimented in make.conf(5). Because almost nobody uses newgrp(1) and because it has the potential to be a security hole, it's not installed setuid by default. If you want it installing setuid, set ENABLE_SUID_NEWGRP in make.conf. Gavin