tar no longer extracting with setuid bits

Denis Vlasenko vda.linux at googlemail.com
Mon Feb 12 22:05:00 UTC 2007


On Sunday 11 February 2007 23:24, Stephane Billiart wrote:
> While trying to upgrade from busybox 1.2.2.1 to 1.4.1, I noticed that
> setuid files in tar files are no longer created with the setuid bit
> while running as root.
> 
> The attached patch (which partially reverts r15775 of
> archival/libunarchive/data_extract_all.c) fixes the problem.

Applied, thanks!

> Any idea why the chmod call was removed?

Probably because open is creating file with correct mode.
But setuid bits can be lost later.
--
vda



More information about the busybox mailing list