Subject: Re: Making setuid files immutable
To: Andrew Brown <twofsonet@graffiti.com>
From: Manuel Bouyer <bouyer@antioche.lip6.fr>
List: tech-security
Date: 01/16/1999 03:27:31
On Jan 15, Andrew Brown wrote
> bzzt!  nope.  mv-ing the file would require a change to the inode,
> which ain't allowed.

Hum you're rigth. I didn't test it, I was sure moving a file did just change
the directory entry. Well, I was wrong :)

> 
> of course...they could always move the entire directory...
> 

And that's enouth, unless the parent directory is immutable too ...
Anyway, I think it's good practice to make directory immutable too when
possible.

--
Manuel Bouyer, LIP6, Universite Paris VI.           Manuel.Bouyer@lip6.fr
--