Xref: utzoo comp.unix.programmer:1255 alt.sources.d:1579 Path: utzoo!news-server.csri.toronto.edu!cs.utexas.edu!usc!wuarchive!zaphod.mps.ohio-state.edu!lavaca.uh.edu!menudo.uh.edu!sugar!ficc!peter From: peter@ficc.ferranti.com (Peter da Silva) Newsgroups: comp.unix.programmer,alt.sources.d Subject: Re: -x implementations Message-ID: Date: 7 Mar 91 19:44:46 GMT References: <19017@rpp386.cactus.org> <6124@segue.segue.com> <668288533.3106@mindcraft.com> <1991Mar07.091123.13033@kithrup.COM> Reply-To: peter@ficc.ferranti.com (Peter da Silva) Organization: Xenix Support, FICC Lines: 12 In article <1991Mar07.091123.13033@kithrup.COM> sef@kithrup.COM (Sean Eric Fagan) writes: > (Actually, I had a fun few minutes, because it kept telling me that I had > write permission to /etc/passwd without having to be root [I made my binary > suid root]. If occurred to me, after a while, that the file was group > writable, and, now that multiple groups work, I happen to be in the > "correct" group to write to it. Neat...) Isn't this a security hole? I mean, once you can write to the password file you have the keys to the kingdom. I hope this goes away when you turn off C2. -- Peter da Silva. `-_-' peter@ferranti.com +1 713 274 5180. 'U` "Have you hugged your wolf today?"