[34905] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Curious fileutils/coreutils behaviour.

daemon@ATHENA.MIT.EDU (Michael Shigorin)
Sat May 15 14:45:06 2004

Date: Sat, 15 May 2004 09:39:39 +0300
From: Michael Shigorin <mike@osdn.org.ua>
To: bugtraq@securityfocus.com
Message-ID: <20040515063939.GE26734@osdn.org.ua>
Mail-Followup-To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="NDin8bjvE/0mNLFQ"
Content-Disposition: inline
In-Reply-To: <200405141849.i4EIn790067572@kac.cnri.dit.ie>

--NDin8bjvE/0mNLFQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, May 14, 2004 at 07:49:07PM +0100, David Malone wrote:
> > (*)Contrary to the FAQ entry you cited, it is sometimes useful to chang=
e the
> > ownership of a symlink.  Since the owner of a symlink can be detected b=
y a
> > program, there can exist programs which depend on it.
> Yes, indeed. As another example, Apache has an option to only
> follow symlinks if they belong to the right person.

OpenWall Linux kernel patch also finds some usage for ownership
of symlinks in +t directories, just in case.

OTOH: I've recently had to fix permissions of a bunch of symlinks
(exactly due to -ow effect); apparently in ALT Linux the default
behaviour of coreutils-5.2.1 is to affect the target though at a
quick skim I can't identify the relevant patch, if any.

--=20
 ---- WBR, Michael Shigorin <mike@altlinux.ru>
  ------ Linux.Kiev http://www.linux.kiev.ua/

--NDin8bjvE/0mNLFQ
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFApbsrbsPDprYMm3IRApIuAKC/6QCEvU+SwSp/ZWgbdinLybTlXACfaY1V
LmD//Voeak9beeFdLNJjoig=
=WbEU
-----END PGP SIGNATURE-----

--NDin8bjvE/0mNLFQ--

home help back first fref pref prev next nref lref last post