Re: [SM-USERS] setuid on in squirrelmail 1.4.2-1

[Konstantin R. <ic...@li...>]

Le jeu 08/01/2004 à 01:42, Douglas Campbell a écrit :
> I also noticed this a few days ago.  I am using squirrelmail 1.4.2-1, downloaded from squirrelmail.org site; I am
> running it under RedHat 8.0 with all patches applied.  The previous version of squirrelmail was deleted prior to
> installing this one.
> 
> Here is a sample directory listing, in response to someone's post in reply to the above.  It appears that the
> directories are the only things affected in my case.  I installed it as root; should I change ownership?

Bleh. It's a bug in our build system. Our build directory on
beta.linux.duke.edu is setuid, so everything else that's created during
build ends up being g+s as well. It's not dangerous or anything in the
security sense -- g+s on directory bits just means that new files
created in that directory will be have the group owner by default the
one of the directory they are created in. Since the ownership is
root:root, it's a useless setting anyway.

I'll see if I can rebuild the RPM without this problem, but it shouldn't
affect anyone in any way.

Regards,
-- 
Konstantin Riabitsev <ic...@li...>
Linux@DUKE