Package: coreutils
Version: 5.2.1-2
Severity: normal

/bin/chgrp, when invoked on a SETUID file, drops the SETUID bit:

  wing:~# ls -l /bin/su
  -rwxr-xr-x  1 root root 23416 2005-03-15 13:59 /bin/su*
  wing:~# chmod 4754 /bin/su
  chmod 4754 /bin/su
  wing:~# ls -l /bin/su
  -rwsr-xr--  1 root root 23416 2005-03-15 13:59 /bin/su*
  wing:~# chgrp wheel /bin/su
  chgrp wheel /bin/su
  wing:~# ls -l /bin/su
  -rwxr-xr--  1 root wheel 23416 2005-03-15 13:59 /bin/su*

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (600, 'testing'), (98, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-wing
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages coreutils depends on:
ii  libacl1                     2.2.26-1     Access control list shared library
ii  libc6                       2.3.2.ds1-21 GNU C Library: Shared libraries an

-- debconf-show failed

-- 
 .''`.     martin f. krafft <[EMAIL PROTECTED]>
: :'  :    proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!
 
"william blake, you're a dead man!"
                                                           -- nobody

Attachment: signature.asc
Description: Digital signature

Reply via email to