Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!utgpu!water!watnot!watmath!clyde!rutgers!princeton!allegra!alice!ark From: ark@alice.UUCP Newsgroups: comp.unix.wizards,comp.unix.questions Subject: Re: UNIX file setuid sucurity hole? Message-ID: <6722@alice.uUCp> Date: Sat, 14-Mar-87 10:54:39 EST Article-I.D.: alice.6722 Posted: Sat Mar 14 10:54:39 1987 Date-Received: Sun, 15-Mar-87 04:07:21 EST References: <2168@ncoast.UUCP> Organization: AT&T Bell Laboratories, Liberty Corner NJ Lines: 14 Xref: utgpu comp.unix.wizards:1388 comp.unix.questions:1371 Summary: Doesn't work. In article <2168@ncoast.UUCP>, robertd@ncoast.UUCP writes: > Then simply > chmod the file to set to the owners ID > apon execution? Then chown it to the > owner. Then execute the command. Your > uid will be set to the owner , who owns > the file you wish to see. > Sorry, that doesn't work. Systems that allow non-privileged users to execute "chown" also turn off the set-uid bits when chown is executed.