adduser command sets files suid root

Robert Storey <[email protected]>
Newsgroups gmane.linux.debian.knoppix
Message-ID <[email protected]>
I made a bizarre discovery today. It's not just a Knoppix problem, but
Knoppix is affected.

I've noticed that if I create new users with the "adduser" command, all
the files in the new user's directory (which are copied from /etc/skel)
are set suid root. This is true even though the files in /etc/skel are
not suid root. All files in the new user's directory are affected, even
hidden files.

The problem can be worked around if you login as that particular user,
and issue the following two commands:

  chmod -s -R *
  chmod -s -R .[a-zA-Z]*

I thought this was a Knoppix problem, but then I checked my Slackware
partition and found that it was the same. I'm just wondering what this
is happening? Seems to me that suid root would be a security hazard. OK,
I realize that none of these files are executable binaries, but it still
seems like a bad practice.

The default user "knoppix" does not have this particular problem. Very
strange indeed.

regards,
Robert
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.