Tom Badran wrote:
On Friday 22 Aug 2003 12:37, Johann Koenig wrote:Which is exactly what i was saying, except i dont know how to make a tarball that retains all file permissions/attributes etc..Those should be retained by default. Make a directory with a few files with odd permissions, tar it, untar it, and see what happens.Ahh, i had tried this already, but i just did the untar as root and it works. If you extract a tarball as user it seems to set all file ownerships to user.user instead of owner.group
This is a Good Thing.Imagine if you could set permissions, attributes, and ownership of untarred files as an arbitrary user.
Now imagine you have an unprivileged account on a machine somewhere, and root on your box at home. At home you tar up an archive which includes a suid root file which spawns a (root) shell (or just does something really bad to the system). Now you scp the .tar to the unpriv. machine, untar it, and run your little suid root program.
Nice, xfs here i come .... Tom
-- _________________________________________________________ Rich Puhek ETN Systems Inc. 2125 1st Ave East Hibbing MN 55746 tel: 218.262.1130 email: rpuhek@etnsystems.com _________________________________________________________