Thus spake Matt Stegman ([EMAIL PROTECTED]):

> On Fri, 19 May 2000, Brian T. Schellenberger wrote:
> > ...
> > > I don't think it's wrong. How would you like to have a user write a
> > > setuid script and then make you the owner?
> > 
> > That's *exactly* what *he* should be able to.  So long as *I* can't me
> > me the owner of "his* files, I don't see the problem.
> 
> So I can:
> 
> $ cp /bin/sh /tmp/sh
> $ chmod 4755 /tmp/sh
> $ chown root /tmp/sh
> $ /tmp/sh
> # 
> 
> Is this correct, intended behavior on HP-UX?

Not to mention the question of quota. Can anyone "give" you a massive
file and chew up all your remaining quota?

-- 
|Deryk Barker, Computer Science Dept. | Music does not have to be understood|
|Camosun College, Victoria, BC, Canada| It has to be listened to.           |
|email: [EMAIL PROTECTED]         |                                     |
|phone: +1 250 370 4452               |         Hermann Scherchen.          |

Reply via email to