Re: scary, maybe
Matthias Benkmann <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Message-ID | <[email protected]> |
On Sun, 13 Oct 2002 22:29:31 +0100 Sam Halliday <[email protected]> wrote: > echo "The folders /tmp /tmp/.font-unix /tmp/.X11-unix /var/mail /var/tmp > are supposed" echo "to be globally writable That is not completely correct. They need to have the sticky flag (o+t), too, otherwise it's a security hole. You should add a test for this to your script. MSB -- I tried sniffing Coke once, but the ice cubes got stuck in my nose. -- Unsubscribe: send email to [email protected] and put 'unsubscribe lfs-security' in the subject header of the message