Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!seismo!think!ames!oliveb!sun!gorodish!guy
From: guy%gorodish@Sun.COM (Guy Harris)
Newsgroups: comp.unix.questions,comp.unix.wizards
Subject: Re: SysV's chown ing makes it hard to track file creators.
Message-ID: <15137@sun.uucp>
Date: Tue, 17-Mar-87 04:59:18 EST
Article-I.D.: sun.15137
Posted: Tue Mar 17 04:59:18 1987
Date-Received: Wed, 18-Mar-87 06:30:13 EST
References: <713@aw.sei.cmu.edu.sei.cmu.edu> <1150@hoxna.UUCP>
Sender: news@sun.uucp
Lines: 30
Xref: mnetor comp.unix.questions:1470 comp.unix.wizards:1478

> 	Well, you can't track the original creator easily, but the
> evil loop would run under the perpetrator's UID,

Not if it wasn't set-UID, it wouldn't.  Presumably, the intent here
was to trap some unwary user who has the current directory in their
path but not at the end of the path.

Then again, you shouldn't have the current directory as the first
item in your path anyway....

I'm not sure this is a good example of something anti-social you can
do on a system where you can give files away.

> so you could look in the accounting files and see which person executed
> 100,000 mkdirs at that particular time. (What's accounting like on BSD ?)

Similar, considering the basic process accounting code in both
kernels is derived from the V7 code.

Of course, if you didn't have process accounting turned on, this
wouldn't help; process accounting can consume disk space pretty fast,
so not everybody uses it.

> > But then again, I use real Unix, not System V :-).

> 	Nah, SysV is the *real* UNIX (tm).  BSD's, like, a *mutant*
> or something. :-)

Nope, UNIX is defined as "whatever runs on Dennis Ritchie's machine",
so V9 is the only *real* UNIX. :-)