On Mon, Jul 07, 2003 at 01:02:08AM -0400, Robert Brockway wrote:
> This is a security issue if anyone is using unix permissions to restrict
> execution _from_ a subset of users. This is unusual but I've seen it
> done.
>
> zen:~$ cat ./testfile
> #!/bin/bash
>
> echo "I'm executing!"
>
> zen:~$ ls -l testfile
> ----r-xr-x 1 robert users 46 Jul 7 00:52 testfile*
>
> zen:~$ ./testfile
> bash: ./testfile: Permission denied
>
> zen:~$ chown root ./testfile
my previous mail i missed that you were doing this as non-root. as
already reported you need to update your patches, or else sysctl -w
fs/xfs/restrict_chown=1 as the default was broken in the first set of
2.4.21 split patches.
--
Ethan Benson
http://www.alaska.net/~erbenson/
pgpd6BwzrACFf.pgp
Description: PGP signature
|