Public bug reported:

Consider a situation with users "joe" and "bob", who are both members of
"group". There is a directory "grouponly" with permissions 070 owned by
"joe:group". Joe is unable to access the directory, because he is the
owner and the owner has no privileges. When the directory owner is
changed to "bob:group", Joe is now able to access the directory.

I believe this is a problem because the highest permission available
should always be granted. In this case, Joe has permission via group and
not owner. Joe should be able to access the directory.

I have included an example from my Ubuntu Server box illustrating this
error.

--------------------------------------

[EMAIL PROTECTED]:~/demo$ groups nwaller
nwaller : nwaller downloaders ldapadmin secondarygroup
[EMAIL PROTECTED]:~/demo$ ls -l
total 4
d---rwx--- 2 nwaller ldapadmin 4096 2008-01-21 00:05 grouponly
[EMAIL PROTECTED]:~/demo$ cd grouponly/
-bash: cd: grouponly/: Permission denied
[EMAIL PROTECTED]:~/demo$ sudo chown dyule:ldapadmin grouponly/
[EMAIL PROTECTED]:~/demo$ cd grouponly/
[EMAIL PROTECTED]:~/demo/grouponly$

** Affects: ubuntu
     Importance: Undecided
         Status: New

-- 
Unprivileged owner short-circuits privileged group on directory 
https://bugs.launchpad.net/bugs/184754
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to