Compaq mount patch broken

From: Paul Szabo (pszat_private)
Date: Mon Sep 02 2002 - 20:18:49 PDT

Next message: pszat_private: "[Full-Disclosure] Compaq mount patch broken"

Previous message: Martin Schulze: "[SECURITY] [DSA 160-1] New scrollkeeper packages fix insecure temporary file creation"
Next in thread: Paul Szabo: "Re: Compaq mount patch broken"
Reply: Paul Szabo: "Re: Compaq mount patch broken"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have installed the latest HP/Compaq Tru64 patches

  T64V51B19-C0136901-15143-ES-20020817.tar

Beware of the /sbin/mount in patch OSFPATC0136901510 within: using
'mount -a' kills any local mountd with log message:

Sep  3 06:19:01 rome mountd[228]: aborting: received a User defined signal 1

Note that mountd is started in /sbin/rc3.d/S19nfs but then
/sbin/rc3.d/S20nfsmount uses '/sbin/mount -a -v -t nfs'.
You may want to back out of that patch for now...

(The above is for Tru64 V5.1, the only version I have around.)

I have reported this to Compaq (but expect no speedy resolution). I am
puzzled: why patch /sbin/mount or /usr/bin/csh if they are not setuid?

Cheers,

Paul Szabo - pszat_private  http://www.maths.usyd.edu.au:8000/u/psz/
School of Mathematics and Statistics  University of Sydney   2006  Australia

Next message: pszat_private: "[Full-Disclosure] Compaq mount patch broken"
Previous message: Martin Schulze: "[SECURITY] [DSA 160-1] New scrollkeeper packages fix insecure temporary file creation"
Next in thread: Paul Szabo: "Re: Compaq mount patch broken"
Reply: Paul Szabo: "Re: Compaq mount patch broken"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Sep 03 2002 - 08:12:56 PDT