Re: chown and security
Bjoern Kriews (bkr@cut.de)
Sun, 08 Feb 1998 08:51:55 +0100
> Updating the man pages for system calls, I noticed
> > that we have an lchown these days. Hopefully everybody
> > is aware of the fact that every old chown(1) is now a
> > security risk on every recent Linux system.
> > ["chown -R foo /home/bar" will now change the ownership
> > of /etc/passwd if there was a symbolic link to that
> > under /home/bar.]
I would also opt for sysctl and default old-style because
a lot of my install and backup-scripts that do some
cp -a <dir with links> somewhere_else_where_links_not_valid
fail - the files get copied but cp complains when setting the perms.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu