Subject: chown, quotas and security
To: None <firstname.lastname@example.org>
From: Gordon W. Ross <email@example.com>
Date: 11/08/1994 12:27:12
> Date: Mon, 07 Nov 1994 16:58:56 -0500
> From: "Chris G. Demetriou" <firstname.lastname@example.org>
> [ allowing chown() to normal users ... ]
> It's just _not_ a good idea, regardless of whether or not quotas are on.
Agreed. Also, the people that think they need it can usually get by
with a locally-created suid program that allows a specific set of
users to set file ownership to a specific set of (safe) values.