On Wed, Apr 13, 2005 at 07:52:34PM -0400, Joey Hess wrote:
It's not really clear to me either why people consider this a security
hole now after not worrying about this class of problems for years.
Generally it means that someone just learned something that people
already knew about.
reason for it to. (Note that mkdir w/o -m can be used to make
directories with any desired permissions, with no race, just set the
umask appropriatly).
Not quite. You can set the desired mode in the mkdir call, but you have
to alter the existing umask to make it less restrictive. You can't add
suid or sgid bits that way.
Mike Stone
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
