>2.5.1 certainly had the sticky bit, but there was still at least one >scenario that was claimed to be vunerable. Although I can't remember >which right now. But perhaps along the lines of:
The sticky bit semantics in 2.5.1 were "pure SV" but possibly with a lax interpretation (if users have write permissions to something they can remove it). I fixed this in Solaris with the integration of bug 4167560 in Solaris 8. >No change in sticky bit support, therefore no difference between the >releases? Even with changes in sticky support there are still issues as on other OSes. (Denial of service and such) Casper _______________________________________________ opensolaris-discuss mailing list [email protected]
