[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Exploit in Upgrade Chain?



On Thu, Feb 12, 2009 at 10:37 PM, Lupe Christoph <lupe@lupe-christoph.de> wrote:
> Mode 600 will deny /etc to everybody except root while it will change
> nothing for root. If you have any services on your system that run under
> non-root UIDs, and that have config under /etc, you hose them with any
> mode that removes the eXecute bit for "others".

Mode 600 (on a directory) lacks the access bit, so even root will have
a hard time getting much joy out of /etc. You will need at least 700
to give root access.

regards,
Izak


Reply to: