Re: [Debian 2.0] /usr/bin/suidexec gives root access

From: Russell Coker - mailing lists account (bofhat_private)
Date: Tue Apr 28 1998 - 12:45:19 PDT

Next message: Joey Hess: "Re: [Debian 2.0] /usr/bin/suidexec gives root access"

Previous message: Michael Nelson: "Re: Leveraging search engines against FrontPage enabled websites"
Maybe in reply to: Thomas Roessler: "[Debian 2.0] /usr/bin/suidexec gives root access"
Next in thread: Joey Hess: "Re: [Debian 2.0] /usr/bin/suidexec gives root access"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

>Executive summary: /usr/bin/suidexec gives every user a
>root shell.  Remove it.

  Also change the suidexec line in /etc/suid.conf to the following so it never
gets the SUID bit again: suidmanager /usr/bin/suidexec root root 755
                                       ^^^^
The default is 4755.


---
Vote 1; Claudia Christian.
http://www.worldcharts.nl/xindex.html

Next message: Joey Hess: "Re: [Debian 2.0] /usr/bin/suidexec gives root access"
Previous message: Michael Nelson: "Re: Leveraging search engines against FrontPage enabled websites"
Maybe in reply to: Thomas Roessler: "[Debian 2.0] /usr/bin/suidexec gives root access"
Next in thread: Joey Hess: "Re: [Debian 2.0] /usr/bin/suidexec gives root access"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:51:36 PDT