On Fri, 3 Mar 1995, Marc Samama wrote: > > According to the replies i got so far, sgid bit on directories > dont represent a risk. Then, I still wonder why tiger classifies this as an > 'ALERT'? Perhaps tiger (I haven't seen it so I can't say for sure) mistakes suid bits on files with sgid bits on directories. I guess its an easy enough error to make but it certainly does display some very poor programming.