Bugtraq mailing list archives

Re: xbru vulnerability


From: felicity () KLUGE NET (Theo Van Dinter)
Date: Sat, 8 Nov 1997 13:15:58 -0500


On Sat, 8 Nov 1997, Kyle Amon wrote:

| > It appears as though the program was NOT suppose to go out 777 -- rather
| > 1777.  That little sticky bit of a difference provides for the security of
| > ownership.  Thank you for bringing this to our attention.

Unless you want non-root users to do restores/backups, there's no problem in
making the perms non-world writeable.  My /usr/local/lib/bru directory is
775, works fine (as expected) from root.


--
Randomly Generated Tagline:
Just a hunch; Murphy was an optimist.



Current thread: