Wrong security attributes. Maybe a bug?

Joshua C. joshuacov at googlemail.com
Mon Jan 19 19:06:03 UTC 2009


2009/1/19 Ralf Ertzinger <fedora at camperquake.de>:
> Hi.
>
> On Mon, 19 Jan 2009 18:14:07 +0100, Joshua C. wrote:
>
>> Recently I saw that I can modify/delete any file in my home directory.
>> Even if it is owned by root and is set as 444. If I'm the owner of the
>> directory these files are in, I can do whatever I want with them
>> regardless of their owner and attributes. This is in
>> kde-dolphin-4.1.4.fc9.
>
> This has been the way of UNIX since the dawn of time. Deleting a file
> is a directory operation, so the permissions on the directory apply,
> not the permissions on the file.
>
> You should not be able to modify the file in place, however (but
> you could delete it and create a new one, which would be owned by
> you and not root).

 I think this concers only deleting a file. But I shouldn't be allowed
to rename it, should I? in kde3 I couldn't delete those files. why?




More information about the fedora-devel-list mailing list