On Wednesday 15 August 2007 20:56:10 Steve Dickson wrote: > Now If I'm not mistaken, its been legal since the 70s to use > O_CREAT without a mode because (depending on the OS) the mode > of parent directory will be used (or something similar)... The problem is that without a mode being passed, the kernel uses whatever the stack contents are. And yes, its conceivable the stack contents could create a world writable setuid file which cannot ever be the intended operation. -Steve -- Fedora-maintainers mailing list Fedora-maintainers@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-maintainers -- Fedora-maintainers-readonly mailing list Fedora-maintainers-readonly@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-maintainers-readonly
