[torquedev] Liblog chk_file_sec() function bugs

[Sergio Gelato]

* Vinod KV [2007-10-01 19:26:54 +0530]:
> Comments from the source :
> 
>     *      To be secure, all directories (and final file) in path must be:
>     *              owned by uid < 10
>     *              owned by group < 10 if group writable
>     *              not have world writable unless stick bit set & this
>    is allowed.
> 
> I understand the stress on the security of the __files used by 
> daemons__, and these three make sense for those files. But IMHO, 
> applying the same for __every file/directory in the path__ , seems like 
> an over-kill.
> 
> Can anyone comment on this?

If you have write access to the parent directory, you can rename the file
and replace it with a symbolic link to some other location, maybe on a
different filesystem where it's easier for you to create files with
the uid/gid values you need.

That said, I fully expect sites to patch this code to suit their local 
requirements. For example, I insist on uid==0 while some places may want 
uid<1000 instead. I don't see any obvious one-size-fits-all solution.