From owner-freebsd-security Thu Jul 18 16: 1:11 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8425237B400 for ; Thu, 18 Jul 2002 16:01:07 -0700 (PDT) Received: from sccrmhc02.attbi.com (sccrmhc02.attbi.com [204.127.202.62]) by mx1.FreeBSD.org (Postfix) with ESMTP id DB81143E6A for ; Thu, 18 Jul 2002 16:01:06 -0700 (PDT) (envelope-from crist.clark@attbi.com) Received: from blossom.cjclark.org ([12.234.91.48]) by sccrmhc02.attbi.com (InterMail vM.4.01.03.27 201-229-121-127-20010626) with ESMTP id <20020718230106.FUNO6023.sccrmhc02.attbi.com@blossom.cjclark.org>; Thu, 18 Jul 2002 23:01:06 +0000 Received: from blossom.cjclark.org (localhost. [127.0.0.1]) by blossom.cjclark.org (8.12.3/8.12.3) with ESMTP id g6IN15JK032459; Thu, 18 Jul 2002 16:01:05 -0700 (PDT) (envelope-from crist.clark@attbi.com) Received: (from cjc@localhost) by blossom.cjclark.org (8.12.3/8.12.3/Submit) id g6IN135W032458; Thu, 18 Jul 2002 16:01:03 -0700 (PDT) X-Authentication-Warning: blossom.cjclark.org: cjc set sender to crist.clark@attbi.com using -f Date: Thu, 18 Jul 2002 16:01:03 -0700 From: "Crist J. Clark" To: Mark Hittinger Cc: freebsd-security@FreeBSD.ORG Subject: Re: today's bugtraq flock issue Message-ID: <20020718230103.GC31150@blossom.cjclark.org> Reply-To: "Crist J. Clark" References: <200207181815.g6IIFqBs011069@ns1.pu.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200207181815.g6IIFqBs011069@ns1.pu.net> User-Agent: Mutt/1.4i X-URL: http://people.freebsd.org/~cjc/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, Jul 18, 2002 at 01:15:52PM -0500, Mark Hittinger wrote: > > Just saw the flock issue on bugtraq. This probably needs some discussion. > > Should file locking only be permitted on files that are either owned by the > caller or are writeable to the caller? Locks are permitted if you can _read_ the file. # chmod 660 /etc/dumpdates Will "fix" dump(8). Not sure where tip(1) might block up if aculog is locked. It doesn't appear to lock it. aculog is just a log file. I don't see a reason to block on opening it. Just change that. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message