Re: again security proposal

Frank Sweetser (rasmusin@WPI.EDU)
Mon, 29 Dec 1997 13:07:09 -0500


==> Regarding Re: again security proposal; alan@lxorguk.ukuu.org.uk (Alan Cox) adds:

>> No... See my message. chown must be run from root. This is "standard"
>> operation (changing user uid, etc). Also, I think that my patch (or
>> analog because I don't check all user's groups) must be included to
>> further kernels as a configurable option.

alan> Root is supposed to be able to do it. Fix your chown program if it
alan> upsets you. Im sure GNU will take a chown --nolinked patch

Or, just stick /home on a seperate partition - no hard links, no problem.

-- 
Frank Sweetser rasmusin at wpi.edu fsweetser at blee.net | PGP key available
paramount.res.wpi.net RedHat 5.0  Linux 2.0.33    i586   | at public servers
"How should I know if it works?  That's what beta testers are for.  I only
coded it."
(Attributed to Linus Torvalds, somewhere in a posting)