Re: Files created with emacs are owned by system

[Joost Kremers]

iainb.forms@googlemail.com wrote:
> For the record
> ls -l /usr/local/bin/emacs
> -rwxr-xr-t   2 root  wheel  9673784 Aug  1 15:36 /usr/local/bin/emacs
>
> ls -l /usr/bin/emacs
> -r-sr-xr-x   1 root  wheel  30008 Aug 19  2006 /usr/bin/emacs

see? as i thought, the emacs binary is set-uid root.

the question is, why? emacs is in essence a full programming language, so
when it's suid root, anyone with shell access to your machine can basically
do anything they want on it. which, obviously, is a major security risk.

so assuming that apple didn't do this as part of the standard install, and
if *you* didn't change it either, then who the hell did?

another thing i don't really understand is that /usr/bin/emacs is only
30008 bytes large. the emacs binary you compiled is about 300 times
bigger...

are you sure that box isn't hacked into?


-- 
Joost Kremers                                      joostkremers@yahoo.com
Selbst in die Unterwelt dringt durch Spalten Licht
EN:SiS(9)