Security bug: mkdir removes the sticky bit

Wolfram Kleff (wkleff@bigfoot.com)
Fri, 14 May 1999 20:11:20 +0200 (CEST)


Security bug: mkdir removes the sticky bit

There is a security bug in mkdir:

> mkdir -m 1777 /tmp/foo
> ls -l /tmp
drwxrwxrwx 2 root root 1024 May 14 19:44 foo

The sticky bit is missing.

> strace mkdir -m 1777 /tmp/foo |& grep mkdir
mkdir("/tmp/foo", 01777) = 0

So it looks to be really kernel related.

[I had fixed it in 2.0 ...]

Another (minor) problem with the frame buffer dev:
1)
> setfont -m <map> <font>
changes the font for all ttys but the map is changed for the current tty only.
[Kernel related ?]

2)
fbset changes the current tty only. How can I change all ttys ?
[Kernel related ?]

-- Versions installed: (if some fields are empty or looks
-- unusual then possibly you have very old versions)
Linux [...] 2.2.8 [...]
Kernel modules 2.1.121
Gnu C egcs-2.91.66
Binutils 2.9.1
Linux C Library 2.1.1
Dynamic linker ldd (GNU libc) 2.1.1
Procps 2.0.2
Mount 2.9g
Net-tools 2.01
Kbd 0.96
Sh-utils 1.16
Modules Loaded sound soundcore

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/