From owner-freebsd-questions  Wed Jan 30 21:32: 8 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from topaz.mdcc.cx (topaz.mdcc.cx [212.204.230.141])
	by hub.freebsd.org (Postfix) with ESMTP id 8EA1A37B4A2
	for <freebsd-questions@freebsd.org>; Wed, 30 Jan 2002 21:31:50 -0800 (PST)
Received: from k7.mavetju.org (topaz.mdcc.cx [212.204.230.141])
	by topaz.mdcc.cx (Postfix) with ESMTP
	id 7887A2B779; Thu, 31 Jan 2002 06:31:48 +0100 (CET)
Received: by k7.mavetju.org (Postfix, from userid 1001)
	id 7EE87E1; Thu, 31 Jan 2002 16:31:41 +1100 (EST)
Date: Thu, 31 Jan 2002 16:31:41 +1100
From: Edwin Groothuis <edwin@mavetju.org>
To: Matt Sykes <mattmsykes@yahoo.co.uk>
Cc: freebsd-questions@freebsd.org
Subject: Re: able to delete root-owned files as non-root
Message-ID: <20020131163141.F823@k7.mavetju.org>
Mail-Followup-To: Edwin Groothuis <edwin@mavetju.org>,
	Matt Sykes <mattmsykes@yahoo.co.uk>, freebsd-questions@freebsd.org
References: <20020131052920.1495.qmail@web21007.mail.yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20020131052920.1495.qmail@web21007.mail.yahoo.com>; from mattmsykes@yahoo.co.uk on Thu, Jan 31, 2002 at 05:29:20AM +0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

On Thu, Jan 31, 2002 at 05:29:20AM +0000, Matt Sykes wrote:
> xerxes:~> whoami
> sykes
> xerxes:~> ll testfile 
> -rw-r--r--  1 root  wheel  0 Jan 31 00:23 testfile
> xerxes:~> rm testfile
> override rw-r--r--  root/wheel for testfile? y
> xerxes:~> ll testfile
> ls: testfile: No such file or directory
> 
> Big security problem.
> 
> This should never ever happen.
> 
> I am unable to find any documentation explaining this.
> 
> I checked and my UID isn't 0.

and who owned the directory you were deleting in?

Edwin

-- 
Edwin Groothuis   |              Personal website: http://www.MavEtJu.org
edwin@mavetju.org |           Interested in MUDs? Visit Fatal Dimensions:
------------------+                       http://www.FatalDimensions.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message