Bugtraq mailing list archives

Re: set group id on directories

From: Ollivier.Robert () hsc fr net (Ollivier Robert)
Date: Fri, 3 Mar 1995 10:30:39 +0100 (MET)

According to  the replies i got so far, sgid bit on directories
dont represent a risk. Then, I still wonder why tiger classifies this as an
'ALERT'?


I guess they're not making differences between files and directories (that's
a bit surprising) and they don't like to find that many setgid files.

-- 
Ollivier ROBERT  -=-=-  Herve Schauer Consultants -=-=-   roberto () hsc fr net
-=-=-=-=-=- Support The Free UNIX Systems ! FreeBSD NetBSD Linux -=-=-=-=-=-

Current thread:

Re: Re[2]: snooper watchers fast forward futurama (Mar 01)
- Re: Re[2]: snooper watchers System Administrator (Mar 02)
- Large security hole in SGI IRIX 5.2 Larry Glaze (Mar 02)
  - Re: Large security hole in SGI IRIX 5.2 Christian A. Ratliff (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Larry Glaze (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Dave Schweisguth (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Dave Schweisguth (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Software Test Account (Mar 07)
    - Re: Large security hole in SGI IRIX 5.2 Steve Robbins (Mar 10)
- <Possible follow-ups>
- Re: Re[2]: snooper watchers F. L. Charles Seeger III (Mar 01)
- Re: snooper watchers der Mouse (Mar 01)

(Thread continues...)