From: Jaimie Vandenbergh on
On Wed, 28 Apr 2010 09:20:10 +0100, me32(a)privacy.net (R) wrote:

>Can any of you replicate this? If you can, it looks like an ugly bug
>and one I need to report asap.

Can you give the complete `ls -el` for each of the directory and the
two files? I want to make sure I'm doing like for like.

Cheers - Jaimie
--
"I have an asteroid named after me. Isaac Asimov's got one too.
It's smaller and more eccentric." -- Arthur C. Clarke
From: R on
Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:

> On Wed, 28 Apr 2010 09:20:10 +0100, me32(a)privacy.net (R) wrote:
>
> >Can any of you replicate this? If you can, it looks like an ugly bug
> >and one I need to report asap.
>
> Can you give the complete `ls -el` for each of the directory and the
> two files? I want to make sure I'm doing like for like.

Ok. This time the file at risk ('root_file') is owned by 'root'. To aid
legibility, there is some spacing added below:

bash: pwd
/Users/Shared

bash: ls -el root_file
-rw-r--r-- 1 root wheel 0 28 Apr 10:24 root_file

bash: ls -eld /Users/Shared
drwxrwxrwt 18 root wheel 612 28 Apr 10:24 /Users/Shared

bash: rm root_file
override rw-r--r-- root/wheel for root_file? y
rm: root_file: Permission denied

bash: touch other_file

bash: ls -el other_file
-rw-r--r-- 1 krill wheel 0 28 Apr 10:27 other_file

bash: rm root_file
override rw-r--r-- root/wheel for root_file? y
bash:
From: Jaimie Vandenbergh on
On Wed, 28 Apr 2010 10:44:18 +0100, me32(a)privacy.net (R) wrote:

>Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:
>
>> On Wed, 28 Apr 2010 09:20:10 +0100, me32(a)privacy.net (R) wrote:
>>
>> >Can any of you replicate this? If you can, it looks like an ugly bug
>> >and one I need to report asap.
>>
>> Can you give the complete `ls -el` for each of the directory and the
>> two files? I want to make sure I'm doing like for like.
>
>Ok. This time the file at risk ('root_file') is owned by 'root'. To aid
>legibility, there is some spacing added below:
>
> bash: pwd
> /Users/Shared
>
> bash: ls -el root_file
> -rw-r--r-- 1 root wheel 0 28 Apr 10:24 root_file
>
> bash: ls -eld /Users/Shared
> drwxrwxrwt 18 root wheel 612 28 Apr 10:24 /Users/Shared
>
> bash: rm root_file
> override rw-r--r-- root/wheel for root_file? y
> rm: root_file: Permission denied
>
> bash: touch other_file
>
> bash: ls -el other_file
> -rw-r--r-- 1 krill wheel 0 28 Apr 10:27 other_file
>
> bash: rm root_file
> override rw-r--r-- root/wheel for root_file? y
> bash:

Yes, mine does exactly the same. How peculiar.

A new terminal *also* allows one to rm the root_file, after the
initial rm other_file.

But! I'm wondering if it's the initial 'rm root_file' that's
incorrect, since krill *is* a member of the wheel group, as shown by
the ownerships on other_file.

Cheers - Jaimie
--
"I have an asteroid named after me. Isaac Asimov's got one too.
It's smaller and more eccentric." -- Arthur C. Clarke
From: Chris Ridd on
On 2010-04-28 10:44:18 +0100, R said:

> Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:
>
>> On Wed, 28 Apr 2010 09:20:10 +0100, me32(a)privacy.net (R) wrote:
>>
>>> Can any of you replicate this? If you can, it looks like an ugly bug
>>> and one I need to report asap.
>>
>> Can you give the complete `ls -el` for each of the directory and the
>> two files? I want to make sure I'm doing like for like.
>
> Ok. This time the file at risk ('root_file') is owned by 'root'. To aid
> legibility, there is some spacing added below:
>
> bash: pwd
> /Users/Shared
>
> bash: ls -el root_file
> -rw-r--r-- 1 root wheel 0 28 Apr 10:24 root_file
>
> bash: ls -eld /Users/Shared
> drwxrwxrwt 18 root wheel 612 28 Apr 10:24 /Users/Shared
>
> bash: rm root_file
> override rw-r--r-- root/wheel for root_file? y
> rm: root_file: Permission denied
>
> bash: touch other_file
>
> bash: ls -el other_file
> -rw-r--r-- 1 krill wheel 0 28 Apr 10:27 other_file

What are the permissions on /Users/Shared now?

>
> bash: rm root_file
> override rw-r--r-- root/wheel for root_file? y
> bash:


--
Chris

From: David Empson on
Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:

> On Wed, 28 Apr 2010 10:44:18 +0100, me32(a)privacy.net (R) wrote:
>
> >Jaimie Vandenbergh <jaimie(a)sometimes.sessile.org> wrote:
> >
> >> On Wed, 28 Apr 2010 09:20:10 +0100, me32(a)privacy.net (R) wrote:
> >>
> >> >Can any of you replicate this? If you can, it looks like an ugly bug
> >> >and one I need to report asap.
> >>
> >> Can you give the complete `ls -el` for each of the directory and the
> >> two files? I want to make sure I'm doing like for like.
> >
> >Ok. This time the file at risk ('root_file') is owned by 'root'. To aid
> >legibility, there is some spacing added below:
> >
> > bash: pwd
> > /Users/Shared
> >
> > bash: ls -el root_file
> > -rw-r--r-- 1 root wheel 0 28 Apr 10:24 root_file
> >
> > bash: ls -eld /Users/Shared
> > drwxrwxrwt 18 root wheel 612 28 Apr 10:24 /Users/Shared
> >
> > bash: rm root_file
> > override rw-r--r-- root/wheel for root_file? y
> > rm: root_file: Permission denied
> >
> > bash: touch other_file
> >
> > bash: ls -el other_file
> > -rw-r--r-- 1 krill wheel 0 28 Apr 10:27 other_file
> >
> > bash: rm root_file
> > override rw-r--r-- root/wheel for root_file? y
> > bash:
>
> Yes, mine does exactly the same. How peculiar.

For reference, I'm getting similar behaviour, but in my case, only my
normal user account (which is an admin) seems to be able to delete other
users' files in /Users/Shared. I have another admin account which can't
do this, and there is no obvious difference between them. Both are
members of the same groups, except the other admin account has a private
gid matching its uid, rather than being a member of gid=20 (staff).

> A new terminal *also* allows one to rm the root_file, after the
> initial rm other_file.
>
> But! I'm wondering if it's the initial 'rm root_file' that's
> incorrect, since krill *is* a member of the wheel group, as shown by
> the ownerships on other_file.

Not that simple. For some reason, every file I create in /Users/Shared
(via touch) is in group wheel, no matter which user creates it (admin or
normal). None of my users are members of group wheel.

--
David Empson
dempson(a)actrix.gen.nz