amd64/154112: user can delete file witch owned by root:wheel

Ihor R kaba at
Tue Jan 18 14:50:04 UTC 2011

>Number:         154112
>Category:       amd64
>Synopsis:       user can delete file witch owned by root:wheel
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-amd64
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jan 18 14:50:03 UTC 2011
>Originator:     Ihor R
>Release:        7.3, 8.0, 8.1
GoodNet Ukraine
FreeBSD 8.0-RELEASE-p4 FreeBSD 8.0-RELEASE-p4 #0: Fri Aug 27 15:53:40 EEST 2010     root at  amd64

FreeBSD 7.3-RELEASE-p2 FreeBSD 7.3-RELEASE-p2 #0: Sat Jul 31 13:54:09 EEST 2010     root at  i386

FreeBSD 8.1-RELEASE-p2 FreeBSD 8.1-RELEASE-p2 #0: Fri Jan 14 20:30:40 UTC 2011     Denis at  amd64
The broblem is: 
user can delete files in own home directory owned by root:wheel.

as root, change current directory to user home :
#cd ~username/
#touch 1.txt
#chown root:wheel 1.txt

login to system as user:
uid=1001(username) gid=1001(username) groups=1001(username)
%ls -la | grep 1.txt
-rw-r--r--    1 root      wheel             0 Jan 18 16:38 1.txt
%rm -f 1.txt
%ls -la | grep 1.txt


More information about the freebsd-amd64 mailing list