[SOLVED] I think I have found a security bug

biznatch · Last edited by biznatch on Fri Oct 01, 2004 2:24 am; edited 1 time in total

Here is the deal, I have a user called backup. Backup is a normal user, except he has a SUID tar file used to backup the system. I discovered that anyone can remove the file owned by root if it was created with SUID tar. Is this a known problem (other than the fact that I am using SUID), or should I file a bug?

biznatch · Posted: Mon Sep 27, 2004 9:56 pm Post subject:

Well see what they have to say.

https://bugs.gentoo.org/show_bug.cgi?id=65589
_________________
While your waiting for your post to be answered, please help with unanswered posts.

swegener · Posted: Mon Sep 27, 2004 10:39 pm Post subject:

See my comment I posted to the bug.

biznatch · Posted: Thu Sep 30, 2004 8:20 pm Post subject:

I was not aware of that. I feel dumb now.
_________________
While your waiting for your post to be answered, please help with unanswered posts.