On Fri, 19 May 2000, Brian T. Schellenberger wrote:
> ...
> > I don't think it's wrong. How would you like to have a user write a
> > setuid script and then make you the owner?
> 
> That's *exactly* what *he* should be able to.  So long as *I* can't me
> me the owner of "his* files, I don't see the problem.

So I can:

$ cp /bin/sh /tmp/sh
$ chmod 4755 /tmp/sh
$ chown root /tmp/sh
$ /tmp/sh
# 

Is this correct, intended behavior on HP-UX?

-Matt Stegman
<[EMAIL PROTECTED]>



Reply via email to