ownership of gpa files and directory

zohar stolar zoharst@hadassah-col.ac.il
Wed Apr 24 07:50:01 2002


This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C1EB5C.30F18DE0
Content-Type: text/plain;
	charset="windows-1255"
Content-Transfer-Encoding: quoted-printable

Hello,
I've noticed that the files in the gpa tarball are owned by user/group =
other
than 0/0 (root/root)/
In my case it was 1000/1000. When I opened the tarball I found out that =
the
ownership of the files is of one of my users, which has the UID/GID =
1000.
It is extremely not secure, as you can probably guess, especially since =
some
of the files have write permissions for the world.

Peace.

Zohar Stolar				  =E6=E4=F8 =F1=E8=E5=EC=F8
Computer Science,		    =E4=E7=E5=E2 =EC=EE=E3=F2=E9 =E4=EE=E7=F9=E1,
Hadassah College, Jerusalem,	=EE=EB=EC=EC=FA =E4=E3=F1=E4, =
=E9=F8=E5=F9=EC=E9=ED,
Tel			02-629-1983		  =E8=EC.
Cel.			054-859-301		 =F0=E9=E9=E3:
Fax.			02-625-0619		=F4=F7=F1.


------_=_NextPart_001_01C1EB5C.30F18DE0
Content-Type: text/html;
	charset="windows-1255"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dwindows-1255">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>ownership of gpa files and directory</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2 FACE=3D"Arial">Hello,</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">I've noticed that the files in the =
gpa tarball are owned by user/group other than 0/0 (root/root)/</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">In my case it was 1000/1000. When I =
opened the tarball I found out that the ownership of the files is of =
one of my users, which has the UID/GID 1000.</FONT></P>

<P><FONT SIZE=3D2 FACE=3D"Arial">It is extremely not secure, as you can =
probably guess, especially since some of the files have write =
permissions for the world.</FONT></P>

<P><FONT SIZE=3D2 FACE=3D"Arial">Peace.</FONT>
</P>

<P><FONT COLOR=3D"#0000FF" FACE=3D"Times New Roman">Zohar =
Stolar&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;</FONT> <FONT =
COLOR=3D"#0000FF" FACE=3D"Times New Roman (Hebrew)">=E6=E4=F8 =
=F1=E8=E5=EC=F8</FONT>
<BR><FONT FACE=3D"Times New Roman">Computer =
Science,&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;</FONT> =
<FONT FACE=3D"Times New Roman (Hebrew)">=E4=E7=E5=E2 =EC=EE=E3=F2=E9 =
=E4=EE=E7=F9=E1,</FONT>
<BR><FONT FACE=3D"Times New Roman">Hadassah College, =
Jerusalem,&nbsp;&nbsp;&nbsp;</FONT> <FONT FACE=3D"Times New Roman =
(Hebrew)">=EE=EB=EC=EC=FA =E4=E3=F1=E4, =E9=F8=E5=F9=EC=E9=ED,</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Times New Roman">Tel&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
02-629-1983&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;</FONT> <FONT SIZE=3D2 =
FACE=3D"Times New Roman (Hebrew)">=E8=EC.</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Times New Roman">Cel.&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
054-859-301&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</FONT> <FONT SIZE=3D2 =
FACE=3D"Times New Roman (Hebrew)">=F0=E9=E9=E3:</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Times New Roman">Fax.&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
02-625-0619&nbsp;&nbsp;&nbsp;&nbsp; =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</FONT> <FONT SIZE=3D2 =
FACE=3D"Times New Roman (Hebrew)">=F4=F7=F1.</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C1EB5C.30F18DE0--