httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From <Ralph.Gro...@itdz-berlin.de>
Subject RE: [users@httpd] Weird sbitting of htdigest
Date Tue, 21 Feb 2006 12:40:05 GMT
Hi Nick,

no unusual umask

# umask
0022
 
# touch /tmp/touched
 
# ls -l /tmp/touched
-rw-r--r--  1 root root 0 Feb 21 13:35 /tmp/touched


/tmp as with all my Unix boxes only has the sticky bit set 
to prevent users' mutual file deletion.

That's why I was alarmed when I saw htdigest doing this.
Almost looks as if I am using a cracked version.
I will have to strace my htdigest...



> -----Original Message-----
> From: Nick Kew [mailto:nick@webthing.com]
> Sent: Tuesday, February 21, 2006 1:30 PM
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] Weird sbitting of htdigest
> 
> 
> On Tuesday 21 February 2006 10:09, Ralph.Grothe@itdz-berlin.de
wrote:
> 
> > When I created my first passwd file with htdigest I was
baffled
> > to
> > realize that the htdigest binary from my installation
produced
> > a passwd file with suid, sgid and the sticky bit set.
> >
> > Ugh, what the hack is any sbit necessary for a flat password
> > file?
> 
> It certainly shouldn't do that - and it doesn't for me.
> 
> Do you have strange umask settings, or anything else in the
shell?
> 
> -- 
> Nick Kew
> 
>
-----------------------------------------------------------------
----
> The official User-To-User support forum of the Apache HTTP 
> Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest:
users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message