Security
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
 
User Name:
Password:
Remember me
Go Back   Web Development Archives FAQs Security

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Display Modes
 
Unread Web Development Archives Sponsor:
  #1  
Old April 29th, 2008, 01:39 AM
Mtek
Guest
Dev Archives Newbie (0 - 499 posts)
 
Posts: n/a  
Time spent in forums:
Reputation Power:
Unix Access

Hi,

I'm a bit new at this, so please bear with me.

If I have a user, USER1, and his user ID is 523, and then there is the
group USER1 with a group ID of 523.

How come USER1 can change to all the other directories and see
everyone's files? If he only belongs to his own group, shouldn't he
be restricted to his home directory?

What basic thing am I missing???

Thank you!

John

Reply With Quote
  #2  
Old April 30th, 2008, 07:00 AM
Rob Robason
Guest
Dev Archives Newbie (0 - 499 posts)
 
Posts: n/a  
Time spent in forums:
Reputation Power:
Unix Access

A couple of ideas:
Search of directories (and cd to) are controlled by the x bit in the
mode. Check the directory's go+rx setting, i.e., mode = rx.rx would
give access to other group members or system wide.

The match between uid for one user and gid for another is also
suspicious. Fedora, for example, creates new users with matching uid and
gid. If USER1's gid is ALS 523, putting both users in the same group,
then directories/files with gid=523 and mode g+r.

Linux and many other versions of UNIX support multiple groups: If I'm
listed as a member of group 523, I'm a member of that group in addition
to my default login group. See id(1).

Mtek wrote:
Hi,
>

I'm a bit new at this, so please bear with me.
>

If I have a user, USER1, and his user ID is 523, and then there is the
group USER1 with a group ID of 523.
>

How come USER1 can change to all the other directories and see
everyone's files? If he only belongs to his own group, shouldn't he
be restricted to his home directory?
>

What basic thing am I missing???
>

Thank you!
>

John

Reply With Quote
Reply

Viewing: Web Development Archives FAQs Security > Unix Access


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest Threads | Shoutbox
Forum Jump

 Free IT White Papers!
 
How to Present Effectively Online
This white paper offers practical and actionable advice on the key steps that any presenter should consider as they plan and execute a Webinar or online meeting.

Request Your Free Technology Downloads!
 
Open Source Security Myths
Open Source Software (OSS) is computer software whose source code is available to the general public with relaxed or non-existent intellectual property restrictions (or arrangement such as the public domain), and is usually developed with the input of many contributors.

Request Your Free Technology Downloads!
 
Power and Cooling Capacity Management for Data Centers
This paper describes the principles for achieving power and cooling capacity management.

Request Your Free Technology Downloads!
 
Scalable, Fault-Tolerant NAS for Oracle - The Next Generation
For several years NAS has been evolving as a storage alternative for Oracle databases, and for good reason: NAS is quite often the simplest, most cost-effective storage approach for Oracle. Learn about the benefits that HP's approach to scalable NAS brings to Oracle environments in this comprehensive white paper.

Request Your Free Technology Downloads!
 
Understanding Web Application Security Challenges
This white paper discusses many common threats and preventive measures for Web application security, and explains what you can do to help protect your organization.

Request Your Free Technology Downloads!
 

Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2009 by Developer Shed. All rights reserved. DS Cluster 1 Hosted by Hostway
For more Enterprise Application Development news, visit eWeek