From xemacs-m  Tue Apr  1 18:52:35 1997
Received: from altair.xemacs.org (steve@xemacs.miranova.com [206.190.83.19])
	by xemacs.org (8.8.5/8.8.5) with ESMTP id SAA28481
	for <xemacs-beta@xemacs.org>; Tue, 1 Apr 1997 18:52:34 -0600 (CST)
Received: (from steve@localhost)
	by altair.xemacs.org (8.8.5/8.8.5) id RAA18558;
	Tue, 1 Apr 1997 17:05:18 -0800
Mail-Copies-To: never
To: xemacs-beta@xemacs.org
Subject: Re: A security hole during XEmacs installation
References: <kig7mipznnu.fsf@jagor.srce.hr> 	<m2raguibri.fsf@altair.xemacs.org> <199704012241.OAA06912@newman>
X-Url: http://www.miranova.com/%7Esteve/
X-Face: #!T9!#9s-3o8)*uHlX{Ug[xW7E7Wr!*L46-OxqMu\xz23v|R9q}lH?cRS{rCNe^'[`^sr5"
 f8*@r4ipO6Jl!:Ccq<xoV[Qz2u8<8-+Vwf2gzJ44lf_/y9OaQ`@#Q65{U4/TC)i2`~/M&QI$X>p:9I
 OSS'2{-)-4wBnVeg0S\O4Al@)uC[pD|+
X-Attribution: sb
From: Steven L Baur <steve@miranova.com>
In-Reply-To: "William M. Perry"'s message of Tue, 1 Apr 1997 14:41:34 -0800
Mime-Version: 1.0 (generated by tm-edit 7.106)
Content-Type: text/plain; charset=US-ASCII
Date: 01 Apr 1997 17:05:17 -0800
Message-ID: <m2u3lqtesy.fsf@altair.xemacs.org>
Lines: 20
X-Mailer: Gnus v5.4.39/XEmacs 20.1(beta11)

William M Perry writes:

>   Give up.  I tried to do this for our web server install at spry ages
> ago.  Resistance is futile.  Actually _GNU TAR_ doesn't have a way to turn
> this behaviour _OFF_.

> --same-owner is the default, and there is no switch
> to turn it off.

That proves not to be the case, at least with the version of GNU Tar I 
have installed (1.11.8).

>   Best bet would be to: chown -R `whoami` lisp

>   ??  But that doesn't deal with group crap.

And it doesn't work on systems that don't implement the -R flag in chown.
-- 
steve@miranova.com baur
Unsolicited commercial e-mail will be billed at $250/message.

