IJ40464: SUID/SGID BIT NOT CLEARED AFTER A NON-OWNER WRITE TO A FILE

APAR status

• Closed as program error.

Error description

• The SUID and SGID bits are not cleared after a
  successful write/truncate to a file by a non-owner.
  

Local fix

• Ensure that only owners can write to an executable
  binary file that has the SUID/SGID bit set.
  

Problem summary

• The SUID and SGID bits are not cleared after a
  successful write/truncate to a file by a non-owner.
  

Problem conclusion

• This problem is fixed in 5.1.2 PTF 5
  To see all Spectrum Scale APARs and
  their respective fix solutions refer to page
  https://public.dhe.ibm.com/storage/spectrumscale/spectrum_scale_
  apars.html
  
  Benefits of the solution:
  The SUID and SGID bits are cleared after a successful
  write/truncate to a file by a non-owner or
  a non-root process.
  Work Around:
  Ensure that only owners can write to an executable
  binary file that has the SUID/SGID bit set.
  Problem Trigger:
  Create a file with the SUID and SGID bits set. As a
  non-owner or non-root user, write to the file with
  the write() system call or truncate the file
  with the truncate() system call.
  Symptom: Unexpected Results/Behavior
  Platforms affected: ALL Linux OS environments
  Functional Area affected: All Scale Users
  Customer Impact: High Importance
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SPEC SCALE STD

• Fixed component ID

  5737F33AP

Applicable component levels