Date: Thu, 16 Dec 1999 11:28:21 -0700 From: Warner Losh <imp@village.org> To: Spidey <beaupran@iro.umontreal.ca> Cc: Robert Watson <robert+freebsd@cyrus.watson.org>, Chris England <cengland@obscurity.org>, freebsd-security@FreeBSD.ORG Subject: Re: From BugTraq - FreeBSD 3.3 xsoldier root exploit (fwd) Message-ID: <199912161828.LAA72864@harmony.village.org> In-Reply-To: Your message of "Thu, 16 Dec 1999 13:27:15 EST." <14425.12035.757889.422296@anarcat.dyndns.org> References: <14425.12035.757889.422296@anarcat.dyndns.org> <199912160615.XAA69151@harmony.village.org> <Pine.BSF.3.96.991216091552.26813A-100000@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <14425.12035.757889.422296@anarcat.dyndns.org> Spidey writes: : The patch fixes the exploit, not the suid bit. Yes. I'm starting to think that a blanket policy of not setuid root games might not be a bad idea. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199912161828.LAA72864>