* Russell Coker <russ...@coker.com.au> [101020 11:22]: > > This would hurt systems where umask is 002 (or 007) by default (the root > > group is the primary group of the root user with nobody else in it) > > find / -gid 0 -perm /20 \! -type l
I guess find / -gid 0 -perm /20 \! -type l \! -perm /2 reduces the number of false positives. > The above find command will discover some of the cases where access to the > root group will give direct access to interesting things. From a quick run > on > a Squeeze system I noticed that with GID==0 you can apparently write directly > to all USB devices (/dev/bus/usb/*/* is writable). Which package deserved the critical bug for this one? Is it kernel or initscripts? Bernhard R. Link -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20101021094834.ga14...@pcpool00.mathematik.uni-freiburg.de