From owner-freebsd-stable@FreeBSD.ORG Sat Jul 24 14:40:41 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3DF9B16A4CE for ; Sat, 24 Jul 2004 14:40:41 +0000 (GMT) Received: from tomts16-srv.bellnexxia.net (tomts16-srv.bellnexxia.net [209.226.175.4]) by mx1.FreeBSD.org (Postfix) with ESMTP id 872D043D46 for ; Sat, 24 Jul 2004 14:40:40 +0000 (GMT) (envelope-from dmagda@ee.ryerson.ca) Received: from number6.magda.ca ([67.70.90.76]) by tomts16-srv.bellnexxia.netESMTP <20040724144039.MVBV9492.tomts16-srv.bellnexxia.net@number6.magda.ca> for ; Sat, 24 Jul 2004 10:40:39 -0400 Received: from [192.168.1.132] (gandalf.magda.ca [192.168.1.132]) by number6.magda.ca (8.12.11/8.12.11) with ESMTP id i6OEebRX000254 for ; Sat, 24 Jul 2004 10:40:41 -0400 (EDT) (envelope-from dmagda@ee.ryerson.ca) In-Reply-To: <75790734.20040724133110@x3k6a2.net> References: <004201c47150$1726aef0$7c00a8c0@amiel> <75790734.20040724133110@x3k6a2.net> Mime-Version: 1.0 (Apple Message framework v618) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <6FA5C811-DD7F-11D8-8661-000A95B96FF8@ee.ryerson.ca> Content-Transfer-Encoding: 7bit From: David Magda Date: Sat, 24 Jul 2004 10:40:41 -0400 To: freebsd-stable@freebsd.org X-Mailer: Apple Mail (2.618) Subject: Re: permissions X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: David Magda List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Jul 2004 14:40:41 -0000 On Jul 24, 2004, at 07:31, Sebastian Steenbuck wrote: > Another way is to set the setuid bit. (chmod 4000) > > See chmod (1) > >> 4000 (the setuid bit). Executable files with this bit >> set will >> run with effective uid set to the uid of the file >> owner. >> Directories with this bit set will force all files >> and sub- >> directories created in them to be owned by the >> directory >> owner and not by the uid of the creating process, if >> the >> underlying file system supports this feature Note that I don't think this is supported in the GENERIC kernel. I believe you have to add an option to the kernel configuration file and compile a new kernel. Go through NOTES/LINT and search for the string "SUID" or some such. (I don't remember details.)