From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#12632: file permissions checking mishandled when setuid Date: Sat, 13 Oct 2012 10:36:22 +0200 Message-ID: <83a9vq7oqh.fsf@gnu.org> References: <5078CAB6.7020509@cs.ucla.edu> <83fw5i7s4p.fsf@gnu.org> Reply-To: Eli Zaretskii NNTP-Posting-Host: plane.gmane.org X-Trace: ger.gmane.org 1350117434 32304 80.91.229.3 (13 Oct 2012 08:37:14 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Sat, 13 Oct 2012 08:37:14 +0000 (UTC) Cc: 12632@debbugs.gnu.org To: eggert@cs.ucla.edu Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sat Oct 13 10:37:21 2012 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1TMxDj-0001c4-0C for geb-bug-gnu-emacs@m.gmane.org; Sat, 13 Oct 2012 10:37:19 +0200 Original-Received: from localhost ([::1]:41243 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TMxDc-0007jH-EK for geb-bug-gnu-emacs@m.gmane.org; Sat, 13 Oct 2012 04:37:12 -0400 Original-Received: from eggs.gnu.org ([208.118.235.92]:48300) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TMxDZ-0007jA-1e for bug-gnu-emacs@gnu.org; Sat, 13 Oct 2012 04:37:09 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1TMxDY-0006b9-3Q for bug-gnu-emacs@gnu.org; Sat, 13 Oct 2012 04:37:08 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:59933) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1TMxDX-0006b3-WA for bug-gnu-emacs@gnu.org; Sat, 13 Oct 2012 04:37:08 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.72) (envelope-from ) id 1TMxEQ-0000Se-5j for bug-gnu-emacs@gnu.org; Sat, 13 Oct 2012 04:38:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: debbugs-submit-bounces@debbugs.gnu.org Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 13 Oct 2012 08:38:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 12632 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: patch Original-Received: via spool by 12632-submit@debbugs.gnu.org id=B12632.13501174431636 (code B ref 12632); Sat, 13 Oct 2012 08:38:02 +0000 Original-Received: (at 12632) by debbugs.gnu.org; 13 Oct 2012 08:37:23 +0000 Original-Received: from localhost ([127.0.0.1]:41951 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TMxDm-0000QK-NS for submit@debbugs.gnu.org; Sat, 13 Oct 2012 04:37:22 -0400 Original-Received: from mtaout23.012.net.il ([80.179.55.175]:51819) by debbugs.gnu.org with esmtp (Exim 4.72) (envelope-from ) id 1TMxDk-0000Q5-LA for 12632@debbugs.gnu.org; Sat, 13 Oct 2012 04:37:21 -0400 Original-Received: from conversion-daemon.a-mtaout23.012.net.il by a-mtaout23.012.net.il (HyperSendmail v2007.08) id <0MBT00J00P4XST00@a-mtaout23.012.net.il> for 12632@debbugs.gnu.org; Sat, 13 Oct 2012 10:36:19 +0200 (IST) Original-Received: from HOME-C4E4A596F7 ([87.69.4.28]) by a-mtaout23.012.net.il (HyperSendmail v2007.08) with ESMTPA id <0MBT00JE1P8IKE70@a-mtaout23.012.net.il>; Sat, 13 Oct 2012 10:36:19 +0200 (IST) In-reply-to: <83fw5i7s4p.fsf@gnu.org> X-012-Sender: halo1@inter.net.il X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.13 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6 (newer, 2) X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:65548 Archived-At: In addition, I don't understand why is it a good idea to use 'euidaccess' in check_existing. Isn't the fact of the mere existence of a file independent of user's access rights? If 'access' is as good here as 'euidaccess', I think we should use the former, as it is less expensive than the latter (AFAIU).