Re: Permissions

Sven Mascheck <cus.p.mascheck@xxxxxxxxxxxxxxx> wrote, on Tue, 07 Nov 2006:

2. Directories
[snip]

sticky bit:

* [SVID4] well known appliance in /tmp:
directory entries can only be removed if the user owns the
entry or the directory or if the file is writable for him.

Are you sure that's what SVID4 says? It doesn't match the SUSv3
requirements. This is from XBD6 4.2 Directory Protection:

If a directory is writable and the mode bit S_ISVTX is set on the
directory, a process may remove or rename files within that directory
only if one or more of the following is true:

* The effective user ID of the process is the same as that of the
owner ID of the file.

* The effective user ID of the process is the same as that of the
owner ID of the directory.

* The process has appropriate privileges.

and this from the unlink() ERRORS section:

[EPERM] or [EACCES]
The S_ISVTX flag is set on the directory containing the file
referred to by the path argument and the caller is not the file
owner, nor is the caller the directory owner, nor does the caller
have appropriate privileges.

--
Geoff Clare <netnews@xxxxxxxxxxxxx>

.

Relevant Pages

  • Re: [PATCH 1/3] lutimesat: simplify utime(2)
    ... or the times argument is a null pointer and the effective user ID of the ... process does not match the owner of the file and write access is denied. ... The times argument is not a null pointer and the calling process' ...
    (Linux-Kernel)
  • Re: user does not have access privileges
    ... "User does not have access privileges" ... my documents, all users, administrator, and owner. ... >> Suppose there are users - Tom, ... >> "User does not have access privileges" <User does not have access ...
    (microsoft.public.word.docmanagement)
  • Re: LINECALLPRIVILEGE_OWNER
    ... "Kalpesh Modha" schrieb im Newsbeitrag ... Regardless of this setting you start to be always owner of outgoing call YOU ... You may change every call privileges via lineSetCallPrivileges. ... Microsoft MVP for TAPI / Windows SDK ...
    (microsoft.public.win32.programmer.tapi)
  • Re: [PATCH][RFC]: mutex: adaptive spin
    ... Hate seeing it done in the caller that has to re-compute common ... (yeah, yeah, it's cheap) ... Yes, you _also_ need to set the owner in the fast-path, but that's all ... So what I'm saying is that the slow-path should just set it. ...
    (Linux-Kernel)
  • SQL Server 2000: Revoking dbo from BuiltinAdministrators
    ... I normally revoke all privileges from ... Builtin\Administrators as part of my SQL Server 2000 ... I have changed the owner of all the objects to my ID. ...
    (microsoft.public.sqlserver.security)