From: matz@... (Yukihiro Matsumoto)
Date: 2003-11-25T07:42:09+09:00
Subject: Re: Message "Insecure world writable dir ..."

Hi,

In message "Re: Message "Insecure world writable dir ...""
    on 03/11/25, Dave Brown <dagbrown@LART.ca> writes:

|On every Unix system in the world, /tmp is world-writable, but it
|also has the "sticky" bit set: permission 01777.  That's not
|considered to be an insecure permission setting; only the person
|who owns a file in /tmp can remove it or modify it.
|
|If Ruby complains about a directory with permission 0777, then it
|has a point, but if it complains about a directory with permission
|01777, then it's being overzealous.

Don't worry; sticky bit is checked if S_ISVTX is defined.

							matz.