On Tue, 29 Aug 2000, [EMAIL PROTECTED] wrote:

> a file on a different machine to which I can rcp/rlogin/etc has
> these permissions:
> 
> -rw-rw-r--  you you your_file
> 
> I am not you, nor am I in the group you.
> 
> /r:your_computer:~you/your_file
> 
> make a change to this file (maybe add a space, after all, I'm not
> really malicious :)
> 
> try to save the file, I get the message the file is read-only try to
> save anyway, to which I respond with 'yes'.  Now the permissions on
> the file are:
> 
> -rw-rw-r--   me me   your_file

What's the value of the various backup-by-copying-* variables (as well
as backup-by-copying itself)?

When you log in to that machine, can you do the following?

    mv your_file your_file~
    echo foo > your_file

Tramp shouldn't be able to do anything that you couldn't do yourself.
If this is actually a security hole, I'd be kinda suprised.

You might also start XEmacs on that host and try editing the file; I
hope that the same thing happens.

kai
-- 
I like BOTH kinds of music.

Reply via email to