From owner-freebsd-questions  Mon Oct 30 22:30: 9 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from groggy.anc.ptialaska.net (groggy.anc.ptialaska.net [198.70.228.224])
	by hub.freebsd.org (Postfix) with ESMTP id D7A1337B4C5
	for <questions@freebsd.org>; Mon, 30 Oct 2000 22:30:06 -0800 (PST)
Received: (from root@localhost)
	by groggy.anc.ptialaska.net (8.9.3/8.9.3) id VAA82567
	for "freebsd-questions" <questions@freebsd.org>; Mon, 30 Oct 2000 21:29:25 -0900 (AKST)
	(envelope-from groggy@iname.com)
Date: Mon, 30 Oct 2000 21:29:25 -0900 (AKST)
From: groggy@iname.com
Message-Id: <200010310629.VAA82567@groggy.anc.ptialaska.net>
Subject: no respect for W perms?
X-Mailer: Umail v1.3 (FreeBSD)
To: "freebsd-questions" <questions@freebsd.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

i just was writing a C program using
fopen and fgetc and fputc and rename.

with a file with perms such as:

=> rw r r  root    user    FILENAME

"user" could read FILENAME (of course)
and then write it to a temp file, and
the rename() it to FILENAME thereby
defeating the fact "user" had no
write permission.  and no, it
is not a suid program.

is something wrong?  3.5.1-RELEASE.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message