> Eric Sandeen wrote:
> >
> > If you have installed, or plan to install, any systems using
> > the XFS 1.0.1 installer, please read the following message.
> >
> > It was recently discovered that due to a bug* in the underlying
> > Linux kernel, the permissions of several system configuration
> > files created at install time are world-writeable, which poses
> > a security risk.
> >
> > This bug is not XFS-related, and will exhibit itself on an
> > ext2-only install from the XFS 1.0.1 iso as well.
>
> I think I may have seen this at one point on the kernel dev list (or
> something related), but can't recall exactly. I'm curious if the kernel
> people know about this yet, or maybe have already fixed it for later
> kernels?
I think it was fixed by around 2.4.7
Steve
>
> D. Stimits, stimits@xxxxxxxxxx
>
|