Date: Thu, 17 Jul 1997 23:32:12 -0400 (EDT) From: Gene Stark <gene@starkhome.cs.sunysb.edu> To: FreeBSD-gnats-submit@FreeBSD.ORG Subject: kern/4115: SunOS NFS file has wrong owner if creator has EUID = 65534 Message-ID: <199707180332.XAA09260@starkhome.cs.sunysb.edu> Resent-Message-ID: <199707180410.VAA26092@hub.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 4115
>Category: kern
>Synopsis: SunOS NFS file has wrong owner if creator has EUID = 65534
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Jul 17 21:10:02 PDT 1997
>Last-Modified:
>Originator: Gene Stark
>Organization:
SUNY at Stony Brook CS Dept.
>Release: FreeBSD 2.2.2-RELEASE i386
>Environment:
FreeBSD machine with NFS mounted volumes being served
by Sparc IPX's running SunOS 4.1.3.
>Description:
When a program that is running setuid to "nobody" (UID 65534)
creates a file on an NFS mounted volume being served by a
Sparc IPX running SunOS 4.1.3, the file comes out being owned
by a bizarre user ID:
-rwxr-xr-x 1 4294967 daemon 0 Jul 17 23:16 foo
>How-To-Repeat:
Compile the following program, chown to nobody (UID 65534),
chmod 4711, then run it, specifying as argument a path on the
NFS mounted volume. Observe that a file with a bogus UID is
created. If a path is specified on the local FreeBSD machine,
everything is normal.
#include <unistd.h>
#include <sys/types.h>
main(int argc, char *argv[])
{
printf("UID: %ld, EUID: %ld\n", getuid(), geteuid());
creat(argv[1], 0777);
}
>Fix:
Unknown.
>Audit-Trail:
>Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199707180332.XAA09260>