Re: Security Issue

[Thought <krowan@eecs.wsu.edu>]

If someone else owns the directory that the file is in, then they
basically own the file allocation table and can rename the file to
anything they want, or remove the filename alltogether.  It's basically
like they own the filecabinet, and the other person's file is in the
cabinet.  Even though they may have a lock on the file so that nobody can
read it, the person who owns the cabinet can throw out the file.  Isn't
that how it should be?

On Tue, 18 Mar 1997, Matthew Tebbens wrote:

> 
> I'm not sure if this is normal, but it seems that any file owned by
> someone else and in one of my directories can be deleted by me even
> if I don't have the proper permissions to do so. I also can rename the
> file, but I can't alter the file. This holds true even if the file
> is owned by root.
> 
> Is this normal ?
> 
> If so, what things can I do to someone elses file thats in one of my
> directories , just delete or rename the file ?
> 
> As root, what if I want to keep a file in someones directory without them
> deleteing it ?  As I see it now, that can't be done ?!?!?
> 
> Matthew
> 
>