Date: Wed, 4 Oct 2000 02:16:59 -0700 From: Alfred Perlstein <bright@wintelcom.net> To: Kris Kennaway <kris@FreeBSD.ORG> Cc: Dima Dorfman <dima@unixfreak.org>, Mike Silbersack <silby@silby.com>, security@FreeBSD.ORG Subject: Re: BSD chpass (fwd) Message-ID: <20001004021658.F27736@fw.wintelcom.net> In-Reply-To: <20001004021531.B74690@freefall.freebsd.org>; from kris@FreeBSD.ORG on Wed, Oct 04, 2000 at 02:15:31AM -0700 References: <Pine.BSF.4.21.0010040014430.35500-100000@achilles.silby.com> <20001004053422.8A3901F19@static.unixfreak.org> <20001004021426.A74690@freefall.freebsd.org> <20001004021531.B74690@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
* Kris Kennaway <kris@FreeBSD.ORG> [001004 02:15] wrote: > On Wed, Oct 04, 2000 at 02:14:26AM -0700, Kris Kennaway wrote: > > On Tue, Oct 03, 2000 at 10:34:22PM -0700, Dima Dorfman wrote: > > > > For those not subscribed to bugtraq, it's time to remove the suid bit on > > > > chpass. > > > > > > Unfortunatly it isn't that easy if you're running with securelevel > 0 > > > since chpass is installed with the schg (system immutable) flag on by > > > default. Oh well, guess it's time to reboot some hosts. :-/ > > > > mv it into a mode 000 directory :-) > > Oops, can't do that. Reboot :) Can you mount something over it? -- -Alfred Perlstein - [bright@wintelcom.net|alfred@freebsd.org] "I have the heart of a child; I keep it in a jar on my desk." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001004021658.F27736>