lkml.org 
[lkml]   [1996]   [Dec]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: Proposal: restrict link(2)
    Date


    [most of discussion on /tmp deleted...]

    >
    > My proposal would be to disallow linking a file into a directory which
    > has the sticky bit set unless the owner of the file is attempting this.
    > In other words, Joe Random Cracker can't do a 'ln /etc/passwd /tmp/foo'
    > beforehand.
    >
    > Comments?

    Have a look at the linux-security archives over the last month
    or two. There was a whole discussion on the assorted insecurities
    of /tmp and how we might go around fixing them.

    Maybe even a patch or two :)

    btw. Does this sound more like a linux-security issue than a
    linux-kernel issue ???


    > --
    > Thomas Koenig, Thomas.Koenig@ciw.uni-karlsruhe.de, ig25@dkauni2.bitnet.
    > The joy of engineering is to find a straight line on a double
    > logarithmic diagram.
    >


    Regards,
    Stuart Auchterlonie stuarta@foxln.com.au

    \
     
     \ /
      Last update: 2005-03-22 13:38    [W:5.316 / U:0.028 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site