Bob,

Maybe I was not very clear. I am not talking about reading contents of deleted files (what can be achieved, but only by the super-user), i am talking about an unpriviledged user reading the content of a world-readable *directory file* ("cat somedir") and thus being able to see the filenames contained into the directory (which is normal behavior) but also the names of the *deleted* files (very silly example of why it can be an issue: do you want everybody to know you uploaded XXX or warez stuff someday into your home directory ? ;)

FozZy

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]