user able to delete directory owned by root


 
Thread Tools Search this Thread
Top Forums UNIX for Dummies Questions & Answers user able to delete directory owned by root
# 1  
Old 04-13-2011
user able to delete directory owned by root

I've tried to figure this out.
I'm only about 6 mos into my AIX admin duties, but I've got a "security" problem I can't figure out.

I've created a sub directory as follows:

Code:
drwx------ 2 root system 256 Apr 13 16:02 mike

I've logged in another session with the following user:

$ id
uid=991(yoman) gid=1(staff)

$ cd mike
ksh: mike: Permission denied.
$ rmdir mike
$ ls -l mi*
ls: 0653-341 The file mi* does not exist.
$ id
uid=991(yoman) gid=1(staff)

How is it possible for yoman to delete the directory mike ???Smilie


---------- Post updated at 04:13 PM ---------- Previous update was at 04:07 PM ----------

Is it because the directory "above" (i.e. parent) has drwxrwxrwx ?

Last edited by Yogesh Sawant; 04-14-2011 at 09:37 AM.. Reason: added code tags
# 2  
Old 04-13-2011
You should read this link carefully:
https://www.unix.com/tips-tutorials/1...rmissions.html
# 3  
Old 04-13-2011
Yes, it is because of the 777 permissions of the parent directory.
If you were to set the "sticky bit" on the parent directory file this will stop a user deleting something they do not own. See "man chmod".
This User Gave Thanks to methyl For This Post:
 
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. Solaris

SunOS confusing root directory and user home directory

Hello, I've just started using a Solaris machine with SunOS 5.10. After the machine is turned on, I open a Console window and at the prompt, if I execute a pwd command, it tells me I'm at my home directory (someone configured "myuser" as default user after init). ... (2 Replies)
Discussion started by: egyassun
2 Replies

2. Shell Programming and Scripting

Delete everything owned by a particular user

I want to delete all files and folders owned a user say abcuser in the folder /tmp . Can you please give me the command ? Thanks Matt (2 Replies)
Discussion started by: lijjumathew
2 Replies

3. UNIX for Dummies Questions & Answers

Read authorization for everybody on sub-directory owned by root

Hello. On my family laptop, I have a directory named /local. It is owned by root. I want to create a sub-directory named documents ( /local/documents ). I want to exclude exec for every body in that directory I want every authenticated linux user can create a sub directory ( ie :... (7 Replies)
Discussion started by: jcdole
7 Replies

4. Web Development

Apache write permission issues to another user owned directory

Hi I am trying to make a web program which is command line equivalent. i have done the coding in cgi program in perl and html for basic forms to take inputs. when i ran the program from web application i see permission denied messages. after analyzing i found apache is running as wwwrun which... (2 Replies)
Discussion started by: rakeshkumar
2 Replies

5. UNIX for Advanced & Expert Users

Root and non-root user not able to delete the file

Hi!! one strange problem occurred with my RHEL 5 box. i'm having logs folder with ownership of non-root user. Created some files with root user under logs folder. here is the scene: -rw-r----- 1 root root 1048227 Feb 28 12:34 SystemOut_13.02.28_12.34.10.log -rw-r----- 1 root root ... (6 Replies)
Discussion started by: sukhdip
6 Replies

6. AIX

find command to list all the 777 files and directories owned by root user

Hi I'm logged in to an AIX box now and we need to do an audit on this box. cbssapr01:# pwd / Which command will show all the files and directories owned by root user with permissions as 777 ? (8 Replies)
Discussion started by: newtoaixos
8 Replies

7. AIX

AIX 5.x OpenSSH choot and non-root owned

Good day. I was looking at implementing a chroot environment using openssh. I know I can use the sshd_config file and dictate that it is to use chroot for a specific directory for a user/group. However, the issue with this is that it is has to be root owned. To my knowledge, there is no mount... (0 Replies)
Discussion started by: smurphy_it
0 Replies

8. Solaris

Unable to create or delete a directory in /usr with root user

Hi All, I am trying to uninstall jdk 1.5 from my Solaris 10 64 bit but some how was not successful.so tried to delete the folder of jdk from /usr but its throughing error as: Unable to remove directory jdk: Read-only file system Even I tried to create a dir in /usr but its not allowing me... (4 Replies)
Discussion started by: Pshah
4 Replies

9. UNIX for Dummies Questions & Answers

How to delete everything owned bya particular user?

Hi I am an Oracle DBA and I want to delete everything owned byOracle on the AIX server. What command would do that? (5 Replies)
Discussion started by: sarangishere
5 Replies

10. UNIX for Dummies Questions & Answers

Delete Core file in root directory

HP UX 11i Ok my server is about to run out of space, and i would like to know if there is something that i should be doing on a regular basis to maintain the machine like logs that i should clear or dmp file that i should delete... Thanks in Advance (2 Replies)
Discussion started by: bbutler3295
2 Replies
Login or Register to Ask a Question