OK I understand why you can overwrite a file but on the reverse side of the 
coin. How would an admin write a file to your home directory that the user 
could not change or overwrite. As a user one would need write privy's for 
there home directory.

Ta Ta

On Friday 26 October 2001 12:45, you wrote:
> Le Vendredi 26 Octobre 2001 20:19, vous avez écrit :
> > I've not tried this on non-Mandrake boxes, but I think it may be a
> > problem with linux in general not just Mandrake.
> >
> > As root
> >
> > touch /home/user/test1;chmod 600 /home/user/test1
> > touch /home/user/test2;chmod 600 /home/user/test2
> >
> > As user
> >
> > mv test1 test3
> > mv test2 test3
> >
> > Both succeed with no trouble (the 2nd one will ask if you want to
> > override the mode 600).  mv basically does a cp and a rm doesn't it (I
> > didn't look at the source, just guessing) and you shouldn't be able to
> > rm a file you don't have permission to write on.
> >
> > You can mv the files anywhere in your home dir you have write
> > permissions, but you can't seem to move to say /tmp  It would seem that
> > if an admin put a specific file in your home dir that they didn't want
> > you to modify, you could either move it or even replace it with this
> > setup.  I'll admit this would be a little odd, but still a bug.
> >
> > Since I'm not sure who to report this too, someone please let me know.
> >
> > Julia
>
> not a bug!
>
> if you use umask 022 on /home, /home/user is 755 user user
> so, user can modify/erase all files in its $HOME.
> directory's permissions have prior on the files permissions....
> if root wants to put a file in /home/user that he doesn't want user to
> modify, he has to put it in a specific dir which he is the owner.
>
> try this as root:
> cd /home/user
> mkdir test
> # test must be 755 root root
> cd test
> touch test1
> touch test2
>
> now try as user to mv or rm test1 and test2 in /home/user/test.....
>
> bye
> jipe

----------------------------------------
Content-Type: text/plain; charset="iso-8859-1"; name="message.footer"
Content-Transfer-Encoding: 8bit
Content-Description: 
----------------------------------------

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to