security problem

[frag79]

It wasn't until I installed gentoo, a graphical file manager, that I noticed it. I was playing around with it and used it's copy function to copy some files. Well I tried to copy some files that I knew only root had permission too just to see what kind of warning popped up. Well it let me copy it! I have tried a few more times, and it will let me as a normal user copy, cut, or delete any file on the computer. I then logged in under my girlfriends account and she also had root powers. There are a few files, however that I don't have permissions too, like /var/log/auth.log. I checked and the only groups I belong to are cdrom, floppy, and dip. Does anyone know what's going on?

Thanks,
Mike

[ 25 May 2001: Message edited by: frag79 ]

[Strike]

Doesn't do that for me. Make sure it isn't running SUID root (do an ls -l on the executable and look for an "s" in the permissions somewhere)

[frag79]

Nope, i tried that and it's not suid...and it's just not in gentoo, I also have root permissions in konqueror, and the command line.

Mike

[frag79]

Well I'm still trying to figure it out...I even created a new user and it's the same way. For example, here are the permissions of my /sbin directory.
22 23:17 sbin
drwxrwxrwt 10 root root 4096 May

It's set so everyone can enter it and has read access bur only root has write access.

Yet as any user I can move /sbin to my home directory or even user konqueror to move it to the trash can. Although it is just a home computer so it is no big deal, it's just bugging me.

thanks,
Mike