[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Security Issue



Matthew Tebbens <matthew@micrus-pop.fishkill.ibm.com> writes:

> 
> 
> I'm not sure if this is normal, but it seems that any file owned by
> someone else and in one of my directories can be deleted by me even
> if I don't have the proper permissions to do so. I also can rename the
> file, but I can't alter the file. This holds true even if the file
> is owned by root.
> 
> Is this normal ?
> 

yes, for deleting/renaming a file entry in a directory you need write
permission for that directory. To change the contents of the file
(deleting is deleting and not changing the contents) you need write
permission for the file.


Reply to: