Re: possibly security bug in mv ?

[Andreas Schwab]

Nelson Benítez <address@hidden> writes:

> Hi, on man page of mv it is said:
>
> "When both source and destination are on the same filesystem,  they  are
> the same file (just the name is changed; owner, mode, timestamps remain
> unchanged).  When they are on different filesystems, the source file is
> copied  and then deleted.  mv will copy modification time, access time,
> user and group ID, and mode if possible. When copying user and/or group
> ID fails, the setuid and setgid bits are cleared in the copy."
>
> The last sentence (clearing setuid,setgid bits) doesn't seem to be true
> in the following testcase:

You should report that to the author of the manual page.  There is no such
statement in the documentation of coreutils, neither version 5.2.1 nor
5.3.0.

Andreas.

-- 
Andreas Schwab, SuSE Labs, address@hidden
SuSE Linux Products GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."