> > Argh, egg on face: linux lets the owner of a file modify it even if it > > is mode 444 and in a directory they do not own. Yuck! Is this standard > > unix semantics? It sucks. > Even worse: IIRC the owner of a file can chmod it to his or her > heart's content, and this is standard Unix semantics. It could be > mode 000 for all Linux cares.
A better design would have been having the file to have a second UID/GID. So, a file could be owned by root, but setuid man.