From owner-freebsd-hackers Sun Nov 9 07:50:41 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id HAA17038 for hackers-outgoing; Sun, 9 Nov 1997 07:50:41 -0800 (PST) (envelope-from owner-freebsd-hackers) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by hub.freebsd.org (8.8.7/8.8.7) with SMTP id HAA17028 for ; Sun, 9 Nov 1997 07:50:38 -0800 (PST) (envelope-from j@uriah.heep.sax.de) Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id QAA04956 for hackers@FreeBSD.ORG; Sun, 9 Nov 1997 16:50:31 +0100 Received: (from j@localhost) by uriah.heep.sax.de (8.8.7/8.8.5) id QAA01568; Sun, 9 Nov 1997 16:24:21 +0100 (MET) Message-ID: <19971109162421.IH64390@uriah.heep.sax.de> Date: Sun, 9 Nov 1997 16:24:21 +0100 From: j@uriah.heep.sax.de (J Wunsch) To: hackers@FreeBSD.ORG Subject: Re: How useful is this patch? References: <199711090436.UAA26951@freefall.freebsd.org> X-Mailer: Mutt 0.60_p2-3,5,8-9 Mime-Version: 1.0 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: <199711090436.UAA26951@freefall.freebsd.org>; from Julian Elischer on Nov 8, 1997 20:36:20 -0800 Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk As Julian Elischer wrote: > if a mount option is specified, then setting the SUID bit > on a directory specifies similar inheritance with UIDS as we > presently have with GIDs. As long as it's a mount option (defaulting to off), i think i could live with it. > The SUID bits are hereditary to child directories, and > a file 'given away' in this manner > 1/ cannot be give n to root (would defeat quotas) > 2/ has the execute bits stripped off (and suid) Problem: you can cause someone else a DoS attack by maliciously filling his home directory. (I didn't review the patch itself, so i explicitly don't comment on stylistic etc. bugs. Make sure the style adhers to the requirements of style(9).) -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)