Re: Wiping out setuid programs

[niall () POBOX COM (Niall Smart)]

> I thought this one was laid to rest last year in the "Dump a mode
> --x--x--x binary on Linux 2.0.x" thread, wherein Martin Mares summarised:
>
> > Semantics of unreadable files is well-defined at file level (i.e.,
> > it's defined you cannot read() them), but not at any other level. No
> > standard guarantees you that contents of such binaries are not
> > accessible in any other way

For the record, the same caveat applies to the semantics of the
immutable file
flag, i.e. files with the immutable and executable file flags do not
lead to
immutable processes.  For more see:

        http://www.pobox.com/~niall/adv/seclvl.txt

Regards,



Niall