Re: file system permissions regression affecting root

2020-05-16 Thread Christian Kujau
On Wed, 13 May 2020, Patrick Donnelly wrote: > However, it seems odd that this depends on the owner of the directory. > i.e. this protection only seems to be enforced if the sticky directory > is owned by root. That's expected? According to the documentation[0] this appears to be intentional:

Re: file system permissions regression affecting root

2020-05-13 Thread Patrick Donnelly
On Wed, May 13, 2020 at 9:11 AM Al Viro wrote: > > On Wed, May 13, 2020 at 08:00:28AM -0700, Patrick Donnelly wrote: > > In newer kernels (at least 5.6), it appears root is not able to write > > to files owned by other users in a sticky directory: > > Yes. Controlled by

Re: file system permissions regression affecting root

2020-05-13 Thread Al Viro
On Wed, May 13, 2020 at 08:00:28AM -0700, Patrick Donnelly wrote: > In newer kernels (at least 5.6), it appears root is not able to write > to files owned by other users in a sticky directory: Yes. Controlled by /proc/sys/fs/protected_regular, which systemd crowd has decided to enable in commit

file system permissions regression affecting root

2020-05-13 Thread Patrick Donnelly
In newer kernels (at least 5.6), it appears root is not able to write to files owned by other users in a sticky directory: $ uname -r 5.6.11-arch1-1 $ stat -f /tmp File: "/tmp" ID: 0Namelen: 255 Type: tmpfs Block size: 4096 Fundamental block size: 4096 Blocks: Total: