home *** CD-ROM | disk | FTP | other *** search
- Path: sparky!uunet!ulowell!news.bbn.com!usc!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!matt.ksu.ksu.edu!news
- From: probreak@matt.ksu.ksu.edu (James Michael Chacon)
- Newsgroups: comp.os.linux
- Subject: Re: BUG ? I can clobber root's files with `mv'
- Date: 27 Dec 1992 12:02:15 -0600
- Organization: Kansas State University
- Lines: 20
- Message-ID: <1hkr37INNo2p@matt.ksu.ksu.edu>
- References: <BzwK49.H1u@shrdlu.kwnet.on.ca>
- NNTP-Posting-Host: matt.ksu.ksu.edu
-
- gdm@shrdlu.kwnet.on.ca (Giles D Malet) writes:
-
- >With the text/sticky (?) bit set on /tmp, I am unable to delete
- >other users files, quite rightly. But I have discovered a roundabout
- >way of achieving the same thing - mv one of my files onto theirs, then
- >delete it.
-
- >Now I can just delete that file...
-
- >Is this meant to be possible ?
-
- >gdm
- >--
-
- It shouldn't be possible at all. A move should do rename, and on the Sun's
- here at school what I get from them is a rename operation not permitted.
-
- Therefore something is broke in the permissions check I believe.
-
- James
-