Hi,

At 11:41 08/04/02 -0700, Michael Smith wrote:
> > On Mon, 8 Apr 2002, [ISO-8859-2] Pawe� Jakub Dawidek wrote:
> >
> > > Simple example why I think that only owner should have permission to 
> create
> > > hardlinks to his files.
>...
> > I see you forgot to 'ls -l' the resultant link ... you'll find that it has
> > the same permissions and ownership as the original file. Oops.
>
>You misunderstand the original poster's complaint.
>
>The issue is that a non-owner can cause the owner's file to remain alive
>even after the owner has deleted it.  Hence the comment about "later
>breakin".
>
>You could also use this technique to maliciously exhaust a user's quota,
>by linking to their temporary files.  I'm not sure what the standards
>have to say about this, but I don't much like the current behaviour.

If you have any permissions on the file, you can prolong its life without a 
link simply by having a process open it. This is 'better' as a DOS because 
it's harder to spot.

--
Bob Bishop                  +44 (0)118 977 4017
[EMAIL PROTECTED]            fax +44 (0)118 989 4254


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to