Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Aug 2000 12:39:43 +0200 (CEST)
From:      Paul Herman <pherman@frenchfries.net>
To:        Matt Heckaman <matt@ARPA.MAIL.NET>
Cc:        Rick McGee <rickm@imbris.com>, FreeBSD-PORTS <freebsd-ports@FreeBSD.ORG>, FreeBSD-SECURITY <freebsd-security@FreeBSD.ORG>
Subject:   Re: pine 4.21 port issues?
Message-ID:  <Pine.BSF.4.21.0008081235320.310-100000@bagabeedaboo.security.at12.de>
In-Reply-To: <Pine.BSF.4.21.0008080127370.87221-100000@epsilon.lucida.qc.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 8 Aug 2000, Matt Heckaman wrote:

> Yes, I know what the sticky bit does :) The point is, that is NOT
> set on the directory by default in FreeBSD, nor is the directory
> world writable, so why is pine reporting this as a vulnerability?
> I know that it is not, but it's causing panic in my users.

I'm not 100% sure, but it looks like patch-aw tries to address this.

(I haven't tested it in 4.1-STABLE...)

-Paul.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0008081235320.310-100000>