tar no longer extracting with setuid bits
Denis Vlasenko
vda.linux at googlemail.com
Mon Feb 12 22:05:00 UTC 2007
On Sunday 11 February 2007 23:24, Stephane Billiart wrote:
> While trying to upgrade from busybox 1.2.2.1 to 1.4.1, I noticed that
> setuid files in tar files are no longer created with the setuid bit
> while running as root.
>
> The attached patch (which partially reverts r15775 of
> archival/libunarchive/data_extract_all.c) fixes the problem.
Applied, thanks!
> Any idea why the chmod call was removed?
Probably because open is creating file with correct mode.
But setuid bits can be lost later.
--
vda
More information about the busybox
mailing list