[1160] in bugtraq

home help back first fref pref prev next nref lref last post

Re: set group id on directories

daemon@ATHENA.MIT.EDU (Brett Lymn)
Fri Mar 3 00:24:51 1995

From: blymn@awadi.com.AU (Brett Lymn)
To: marc@tky.icdc.fr (Marc Samama)
Date: Fri, 3 Mar 1995 14:03:17 +1030 (CST)
Cc: bugtraq@fc.net
In-Reply-To: <9503021100.AA14560@tky> from "Marc Samama" at Mar 2, 95 08:00:36 pm

According to Marc Samama:
>
>
>I'd like to know if a sgid bit on a directory represents a security risk,
>given the fact that the directory is not world or group writable.
>

It's not much use if the directory is not group at least g-rx.

>On my system, whereas the manual states that this bit is ignored on 
>directories, a file created on such a directory is owned by the same 
>group that posses the dir, and any child directory has the same sgid bit,
>by default.
>

This is normal behaviour on the Suns (and I think it's documented
somewhere)

>It this feature commonly used anyway?
>

It's handy if you have a directory shared by a group of people -
combined with the right umask it makes to permissions on the files
automatic.

-- 
Brett Lymn, Computer Systems Administrator, AWA Defence Industries
===============================================================================
"Also, it takes a lot longer to get up North ..... The slow way"
        - "Clever Trevor" Ian Drury 



home help back first fref pref prev next nref lref last post