Subject: Re: bin/12740: fstat allows an unprivileged user to see open files belonging to other users
To: None <anne@alcor.concordia.ca>
From: Greg A. Woods <woods@weird.com>
List: netbsd-bugs
Date: 04/24/2001 14:41:30
[ On Tuesday, April 24, 2001 at 10:27:21 (-0700), Anne@netbsd.org, Bennett@netbsd.org wrote: ]
> Subject: bin/12740: fstat allows an unprivileged user to see open files belonging to other users
>
>
> >Synopsis: fstat allows an unprivileged user to see open files belonging to other users
> >Class: sw-bug
That's *NOT* a bug. Maybe it could have been a change-request, but then
it should have come with changes that made such a restriction a
non-default option!
Same goes for pkg/12741 and all the silly discussion about restricting ps.
Remember, you're using a Unix-based system, not some fabled A1-secure system!
Unix-based systems create communities, not discourage them!
BTW, your mailer is probably broken too. The mail headers on your PR
appeared as:
From: Anne@netbsd.org, Bennett@netbsd.org
Reply-To: Anne@netbsd.org, Bennett@netbsd.org
which tends to indicate that your mailer failed to qualify the addresses
in those fields as it is required to do.
--
Greg A. Woods
+1 416 218-0098 VE3TCP <gwoods@acm.org> <woods@robohack.ca>
Planix, Inc. <woods@planix.com>; Secrets of the Weird <woods@weird.com>