Path: utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!cs.utexas.edu!tut.cis.ohio-state.edu!rutgers!njin!princeton!phoenix!subbarao From: subbarao@phoenix.Princeton.EDU (Kartik Subbarao) Newsgroups: comp.unix.wizards Subject: Re: SUID directories -- security concern? Message-ID: <13946@phoenix.Princeton.EDU> Date: 18 Feb 90 22:22:27 GMT References: <14198@s.ms.uky.edu> <12157@smoke.BRL.MIL> <2946@auspex.auspex.com> Reply-To: subbarao@phoenix.Princeton.EDU (Kartik Subbarao) Lines: 20 In article <2946@auspex.auspex.com> guy@auspex.auspex.com (Guy Harris) writes: > > >>I've never seen any code to make use of a SUID directory, ... > > > >It can't be set-UID. Probably if it has a meaning (which I cannot tell > >The common extension of that flavor with which I'm familiar uses the >"sticky bit" rather than the set-UID bit - at least it does in 4.3BSD There's another option, that is the capital S. That translates to "keep the same permissions below this directory" - or so I hear. -Kartik -- subbarao@{phoenix,bogey or gauguin}.princeton.edu - Internet subbarao@pucc.princeton.edu - Bitnet