Comment 7 for bug 268663

Revision history for this message
arnau (arnaullv) wrote : Re: [Bug 268663] Re: files incoming through nautilus-share should be created with user ownership, instead of "nobody"

Yes, this is the problem. Once somebody places any file into this folder,
this file has owner: nobody group: nobody.
So this means that I cannot delete (because I don't own them) the files
created on my share folder! (I need to go to command line chown, etc...) If
some user wants to do it they can fill up my computer's harddrive with junk
I cannot delete!

2008/12/23 Felipe Figueiredo <email address hidden>

> Em Ter, 2008-12-23 às 15:17 +0000, arnau escreveu:
> > I think this a big security issue!
> >
> > Once you create a Public folder you cannot delete any of the contents
> created by guest users!
> > It is posible to fill up your drive with junk and not being able to
> delete it (easily of course).
> >
> How exactly is it a security issue? Certainly not by filling up space by
> a non-user account, since this is means no threat to the user.
>
> The shares you've shown, are standard open shares. Please give more
> details on what you mean.
>
> FF
>
> --
> files incoming through nautilus-share should be created with user
> ownership, instead of "nobody"
> https://bugs.launchpad.net/bugs/268663
> You received this bug notification because you are a direct subscriber
> of the bug.
>

--
Arnau Llovet Vidal
<email address hidden>