Re: [suse-security] Re: local user can delete arbitrary files on SuSE-Linux (fwd)

Folks, do NOT use 'find' on a public directory with '-exec rm -f' as root. Period. Ever. Delete it from your crontab *now* and finish reading the

One of the systems here uses this, started from (essentially) /etc/csh.logout: #!/bin/sh sleep 600 /bin/find /tmp -mount -depth -user ${USER} \( -type f -o -type l \) \ -mtime +7 -exec rm {} ';' The thing I like is that it runs as user, not root. It could probably be improved a bit; as a basic idea, would it be possible to run rm with euid of the entry to be deleted, from cron? Volker