help-gnu-emacs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Files created with emacs are owned by system


From: Joost Kremers
Subject: Re: Files created with emacs are owned by system
Date: 1 Aug 2008 17:47:47 GMT
User-agent: slrn/0.9.8.1 (Linux)

address@hidden wrote:
> For the record
> ls -l /usr/local/bin/emacs
> -rwxr-xr-t   2 root  wheel  9673784 Aug  1 15:36 /usr/local/bin/emacs
>
> ls -l /usr/bin/emacs
> -r-sr-xr-x   1 root  wheel  30008 Aug 19  2006 /usr/bin/emacs

see? as i thought, the emacs binary is set-uid root.

the question is, why? emacs is in essence a full programming language, so
when it's suid root, anyone with shell access to your machine can basically
do anything they want on it. which, obviously, is a major security risk.

so assuming that apple didn't do this as part of the standard install, and
if *you* didn't change it either, then who the hell did?

another thing i don't really understand is that /usr/bin/emacs is only
30008 bytes large. the emacs binary you compiled is about 300 times
bigger...

are you sure that box isn't hacked into?


-- 
Joost Kremers                                      address@hidden
Selbst in die Unterwelt dringt durch Spalten Licht
EN:SiS(9)


reply via email to

[Prev in Thread] Current Thread [Next in Thread]