RFC: Remove write permissions from executables

Till Maas opensource at till.name
Mon Jan 25 17:54:36 UTC 2010


On Mon, Jan 25, 2010 at 12:45:26PM -0500, Mike McLean wrote:

> Furthermore, when the user is root, the 0555 mode will not prevent
> writing as it would for normal users.

It does not matter, whether the user is root, but whether he has the
dac_override capability. If you read the original mail (1st paragraph)
again with this in mind, you will understand the reason for the change.

Regards
Till
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/devel/attachments/20100125/7ba36688/attachment.bin 


More information about the devel mailing list