Aduke.1551
net.news
utzoo!decvax!duke!trt
Tue Jan  5 20:13:50 1982
Re: sri-unix.425: inews lossage
(This and sri-unix.425 both belong in net.news.b).
The failure of inews to open(II) a mode 600 file is of course
that it attempts the open as the SUID, not the RUID.

It is a fair challenge for an SUID program to open a file
with RUID permissions but retain the SUID powers.
About the only way I can think of is to pipe(II),
then fork(II) a child which reverts to the RUID, opens the file,
and writes it to the SUID parent via the pipe.

Well, just think, inews may not be able to read the user's 600 file,
but it can read any 600 file owned by the SUID!  That can be handy.

-----------------------------------------------------------------
gopher://quux.org/ conversion by John Goerzen <[email protected]>
of http://communication.ucsd.edu/A-News/


This Usenet Oldnews Archive
article may be copied and distributed freely, provided:

1. There is no money collected for the text(s) of the articles.

2. The following notice remains appended to each copy:

The Usenet Oldnews Archive: Compilation Copyright (C) 1981, 1996
Bruce Jones, Henry Spencer, David Wiseman.