fam
[Top] [All Lists]

[fam] group permissions problems

To: fam@xxxxxxxxxxx
Subject: [fam] group permissions problems
From: Michael Wardle <michael.wardle@xxxxxxxxxx>
Date: Mon, 03 Jun 2002 14:17:41 +1000
Organization: Adacel Technologies
Sender: owner-fam@xxxxxxxxxxx
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0rc2) Gecko/20020512 Netscape/7.0b1
Hi

A flaw was discovered in FAM's group handling. The two effects of this flaw are:
1. users unable to FAM directories they have group read and execute
   permissions on
2. unprivileged users can potentially learn names of files that only
   users in root's group should be able to view

The recently improved IRIX group handling code has been merged into the open source tree, and this is believed to fix this issue.

For more information, see FAM bug 151:
<URL:http://oss.sgi.com/bugzilla/show_bug.cgi?id=151>


--
MICHAEL WARDLE
SGI Desktop & Admin Software
Adacel Technologies Limited


--
Source code, list archive, and docs: http://oss.sgi.com/projects/fam/
To unsubscribe: echo unsubscribe fam | mail majordomo@xxxxxxxxxxx

<Prev in Thread] Current Thread [Next in Thread>
  • [fam] group permissions problems, Michael Wardle <=