Nasty Security Hole?

Andrew Koenig ark at alice.UUCP
Thu Nov 17 06:57:35 AEST 1988


In article <189 at wyn386.UUCP>, mikef at wyn386.UUCP (Mike Faber) writes:
 
> Why can a person with read permission only be able to remove the file?

You can't remove a file; you can remove a link to a file.
If that file has only one link, the file goes away automatically,
as there is no longer any way to refer to it.  (yes, I know
this is slightly oversimplified)

To remove a link, you need write permission for the directory
containing the link, irrespective of the permissions you
have for the file.
-- 
				--Andrew Koenig
				  ark at europa.att.com



More information about the Comp.unix.wizards mailing list