On 06:48 20 Feb 2003, Michael George <[EMAIL PROTECTED]> wrote:
| On Thu, Feb 20, 2003 at 03:36:43PM +1100, Cameron Simpson wrote:
| > On 08:05 19 Feb 2003, Michael George <[EMAIL PROTECTED]> wrote:
| > | But isn't this a filesystem feature?  How can mutt (not) change the mod time
| > | on a file?
| > It could do it after the fact with the utime() call.
| 
| Really?  I thought that one required su permissions to do such a thing...
| Seems like a big security hole to allow any owner of a file to change the mod
| times...  Wow...

It's only a security hole if you imagine that mtime is immutable, and
depend on it for something critical. I can't see how it's worse than
allowing users to _write_ to files they own - after all they could _erase_
them, or fill them with lies!

How do you think "tar" et al unpack stuff with the right timestamps?

Cheers,
-- 
Cameron Simpson, DoD#743        [EMAIL PROTECTED]    http://www.zip.com.au/~cs/

Ignorance is preferable to error; and he is less remote from the truth
who believes nothing, than he who believes what is wrong.
        - Thomas Jefferson



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to