Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!ames!think!samsung!cs.utexas.edu!uunet!auspex!guy From: guy@auspex.auspex.com (Guy Harris) Newsgroups: comp.unix.wizards Subject: Re: SUID directories -- security concern? Message-ID: <2946@auspex.auspex.com> Date: 18 Feb 90 02:13:02 GMT References: <14198@s.ms.uky.edu> <12157@smoke.BRL.MIL> Organization: Auspex Systems, Santa Clara Lines: 11 >>I've never seen any code to make use of a SUID directory, ... > >It can't be set-UID. Probably if it has a meaning (which I cannot tell >without access to your system source) it is "only the owner is permitted >to remove entries from this directory". That sort of thing is a fairly >common extension to the standard UNIX file permissions scheme. The common extension of that flavor with which I'm familiar uses the "sticky bit" rather than the set-UID bit - at least it does in 4.3BSD and System V Release 3.2.