Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 May 2013 23:31:21 -0500
From:      sindrome <sindrome@gmail.com>
To:        Bob Eager <rde@tavi.co.uk>
Cc:        FreeBSD Mailing List <freebsd-ports@freebsd.org>
Subject:   Re: Why does Samba requires 777 permissions on /tmp
Message-ID:  <CAFzAeSdgxAqCJRVpPyNHehYXf%2BrXgHOXo-3G1neYgBLRTVd70w@mail.gmail.com>
In-Reply-To: <20130519222232.13aa95c6@raksha.tavi.co.uk>
References:  <CAFzAeSdgRotc34%2BeyfVHZBA-QGUCWJ1MZDYw1ysRxEV9MhG2BQ@mail.gmail.com> <CADLo83-pFi8E-Wdoyju7YxBmOR67Qr4OWmZA-2x8_Um1F2bwoQ@mail.gmail.com> <CAFzAeSd%2B7oubgZ%2BzSJnmfNPA9v1=T41c=VF0C-sbz=vhyVE_OA@mail.gmail.com> <20130519115232.49f52d01@scorpio> <CADLo83-my3xBj9G9_dT0=FGfvK0jaRFQUhmk_YtRx3h8S_g2%2BQ@mail.gmail.com> <CAFzAeSdhNp3zor_ofMS7P1We6Wgoa5fyxeFFDxq3tPkB2CgYyA@mail.gmail.com> <20130519195639.79464471@raksha.tavi.co.uk> <20130519151706.4d67afe5@scorpio> <CAFzAeSeH_EMK6p4PSCQ0Ps8L=4V%2BarAF7b7FJwmaGinnw5CMUw@mail.gmail.com> <20130519204753.GA47341@jmobile.jimmy.net> <20130519222232.13aa95c6@raksha.tavi.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
You can see the sticky bit is indeed set and I'm still getting these errors:

stat -r /tmp
90 7418880 041777 3 0 0 29641368 512 1368950908 1369024120 1369024120
1130953852 16384 4 0 /tmp


/usr/local/lib/ruby/site_ruby/1.8/pkgtools/pkgtools.rb:483: warning:
Insecure world writable dir /tmp/. in PATH, mode 041777
/usr/local/lib/ruby/site_ruby/1.8/pkgtools/pkgtools.rb:1170: warning:
Insecure world writable dir /tmp/. in PATH, mode 041777
/usr/local/lib/ruby/site_ruby/1.8/pkgtools/pkgmisc.rb:108: warning:
Insecure world writable dir /tmp/. in PATH, mode 041777
/usr/local/lib/ruby/site_ruby/1.8/pkgtools/pkgtools.rb:483: warning:
Insecure world writable dir /tmp/. in PATH, mode 041777


On Sun, May 19, 2013 at 4:22 PM, Bob Eager <rde@tavi.co.uk> wrote:

> On Sun, 19 May 2013 15:59:12 -0500
> Jimmy <ljboiler@gmail.com> wrote:
>
> > From the original post that started this thread, I noticed that the
> > error from portupgrade/ruby was showing the permissions that it didn't
> > like as mode 040777 (octal).   This is definitely with the sticky bit
> > turned OFF. It should be 041777.  'stat -r /tmp' will print the
> > permissions in octal rather than the '..rwx...' from ls -l; the
> > permissions is the third group of numbers.
>
> Well, that's true. And it is a security risk not to have the sticky bit
> on /tmp.
>
> Of course (for the avoidance of confusion) the 040000 bit can't be
> changed, being the 'directory' bit.
> _______________________________________________
> freebsd-ports@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ports
> To unsubscribe, send any mail to "freebsd-ports-unsubscribe@freebsd.org"
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFzAeSdgxAqCJRVpPyNHehYXf%2BrXgHOXo-3G1neYgBLRTVd70w>