Bugtraq mailing list archives

RE: set group id on directories (fwd)

From: cs327953 () student uq edu au (Matthew Bontoft)
Date: Sat, 4 Mar 1995 08:34:37 +1000 (GMT+1000)


On Fri, 3 Mar 1995, Marc Samama wrote:


According to  the replies i got so far, sgid bit on directories
dont represent a risk. Then, I still wonder why tiger classifies this as an
'ALERT'?



Perhaps tiger (I haven't seen it so I can't say for sure) mistakes suid 
bits on files with sgid bits on directories. I guess its an easy enough 
error to make but it certainly does display some very poor programming.

Current thread:

Re: Re[2]: snooper watchers fast forward futurama (Mar 01)
- Re: Re[2]: snooper watchers System Administrator (Mar 02)
- Large security hole in SGI IRIX 5.2 Larry Glaze (Mar 02)
  - Re: Large security hole in SGI IRIX 5.2 Christian A. Ratliff (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Larry Glaze (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Dave Schweisguth (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Dave Schweisguth (Mar 03)
    - Re: Large security hole in SGI IRIX 5.2 Software Test Account (Mar 07)
    - Re: Large security hole in SGI IRIX 5.2 Steve Robbins (Mar 10)
- <Possible follow-ups>
- Re: Re[2]: snooper watchers F. L. Charles Seeger III (Mar 01)
- Re: snooper watchers der Mouse (Mar 01)

(Thread continues...)