[ale] weird tgz shenanigans

Drag0n dragon at atlantacon.org
Thu Dec 5 15:18:24 EST 2002


the UID/GID of the creator of the package is the same number as michele
on the box your opening it on, very common. tar does not extract the
files as owned by root if root opens them, a security feature, that way
you dont open a file with 777 permitions owned as root and executable by
the world.

Drag0n
dragon at atlantacon.org


Jeff Rose wrote:
> 
> I downloaded a .tgz file, saved it in my home directory.
> 
> -rw-------    1 jeff     jeff       291027 Dec  5 14:16 netdrivers.tgz
> 
> if I issue tar xvfz netdrivers.tgz as root, the unzipped files end up
> belonging to my wife.
> 
> -rw-r--r--    1 michele  michele     49008 Nov 16 22:07 winbond-840.c
> -rw-r--r--    1 michele  michele    122618 Nov 17 10:03 tulip.c
> -rw-r--r--    1 michele  michele     50904 Nov 17 10:24 sundance.c
> -rw-r--r--    1 michele  michele     49863 Nov 17 10:32 ns820.c
> -rw-r--r--    1 michele  michele      6131 Nov 17 10:46 Makefile
> -rw-r--r--    1 michele  michele     47960 Nov 17 11:21 epic100.c
> -rw-r--r--    1 michele  michele     71471 Nov 17 12:19 eepro100.c
> -rw-r--r--    1 michele  michele     10506 Nov 17 12:37 kern_compat.h
> -rw-r--r--    1 michele  michele     55787 Nov 17 13:00 rtl8139.c
> -rw-r--r--    1 michele  michele     85842 Nov 17 15:09 3c59x.c
> -rw-r--r--    1 michele  michele     46084 Nov 17 16:16 intel-gige.c
> -rw-r--r--    1 michele  michele     50538 Nov 17 17:14 starfire.c
> -rw-r--r--    1 michele  michele     44533 Nov 17 18:38 via-rhine.c
> -rw-r--r--    1 michele  michele     44069 Nov 17 20:48 hamachi.c
> -rw-r--r--    1 michele  michele     53362 Nov 17 21:15 myson803.c
> -rw-r--r--    1 michele  michele     46477 Nov 17 21:25 natsemi.c
> -rw-r--r--    1 michele  michele     48485 Nov 17 22:16 yellowfin.c
> -rw-r--r--    1 michele  michele     55707 Nov 18 10:45 pci-skeleton.c
> -rw-r--r--    1 michele  michele      3363 Nov 18 10:48 netdrivers.spec
> -rw-------    1 jeff     jeff       291027 Dec  5 14:16 netdrivers.tgz
> 
> But if I issue tar xvfz as jeff, they belong to me.
> 
> -rw-r--r--    1 jeff     jeff        49008 Nov 16 22:07 winbond-840.c
> -rw-r--r--    1 jeff     jeff       122618 Nov 17 10:03 tulip.c
> -rw-r--r--    1 jeff     jeff        50904 Nov 17 10:24 sundance.c
> -rw-r--r--    1 jeff     jeff        49863 Nov 17 10:32 ns820.c
> -rw-r--r--    1 jeff     jeff         6131 Nov 17 10:46 Makefile
> -rw-r--r--    1 jeff     jeff        47960 Nov 17 11:21 epic100.c
> -rw-r--r--    1 jeff     jeff        71471 Nov 17 12:19 eepro100.c
> -rw-r--r--    1 jeff     jeff        10506 Nov 17 12:37 kern_compat.h
> -rw-r--r--    1 jeff     jeff        55787 Nov 17 13:00 rtl8139.c
> -rw-r--r--    1 jeff     jeff        85842 Nov 17 15:09 3c59x.c
> -rw-r--r--    1 jeff     jeff        46084 Nov 17 16:16 intel-gige.c
> -rw-r--r--    1 jeff     jeff        50538 Nov 17 17:14 starfire.c
> -rw-r--r--    1 jeff     jeff        44533 Nov 17 18:38 via-rhine.c
> -rw-r--r--    1 jeff     jeff        44069 Nov 17 20:48 hamachi.c
> -rw-r--r--    1 jeff     jeff        53362 Nov 17 21:15 myson803.c
> -rw-r--r--    1 jeff     jeff        46477 Nov 17 21:25 natsemi.c
> -rw-r--r--    1 jeff     jeff        48485 Nov 17 22:16 yellowfin.c
> -rw-r--r--    1 jeff     jeff        55707 Nov 18 10:45 pci-skeleton.c
> -rw-r--r--    1 jeff     jeff         3363 Nov 18 10:48 netdrivers.spec
> -rw-------    1 jeff     jeff       291027 Dec  5 14:16 netdrivers.tgz
> 
> Why is this?
> 
> --
> Jeff Rose
> 
> jojerose at mindspring.com
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale

_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale






More information about the Ale mailing list