Re: GtkFileSelection security problem?
| From: | James Cameron | Date: | Thu, 10 Jun 2004 03:49:00 +0000 |
| Subject: | Re: GtkFileSelection security problem? | ||
| References: | 1 | Groups: | php.gtk.dev php.gtk.general |
| Request: | Send a blank email to php-gtk-dev+get-627@lists.php.net to get a copy of this message | ||
But this is not unusual. It's doing exactly what the operating system
lets it do. The directory ownership counts for more.
Example:
host:~$ touch test-file
host:~$ ls -l test-file
-rw-r--r-- 1 user user 0 Jun 10 13:46 test-file
host:~$ su
Password:
host:/home/user# chown root:root test-file
host:/home/user# exit
exit
host:~$ ls -l test-file
-rw-r--r-- 1 root root 0 Jun 10 13:46 test-file
host:~$ rm test-file
rm: remove write-protected regular empty file `test-file'? y
host:~$
--
James Cameron mailto:quozl@us.netrek.org http://quozl.netrek.org/