Date: Sun, 16 Aug 1998 14:17:55 -0300 (ART) From: fpscha@schapachnik.com.ar To: FreeBSD-gnats-submit@FreeBSD.ORG Subject: bin/7632: Race condition in /stand/sysinstall Message-ID: <199808161717.OAA01029@localhost.schapachnik.com.ar>
next in thread | raw e-mail | index | archive | help
>Number: 7632 >Category: bin >Synopsis: Race condition in /stand/sysinstall >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Aug 16 11:00:00 PDT 1998 >Last-Modified: >Originator: Fernando P. Schapachnik >Organization: >Release: FreeBSD 2.2.6-RELEASE i386 >Environment: >Description: /stand/sysinstall creates a temporary file named /tmp/doc.tmp. It first unlink any previous copy and then creates a new one. But between these syscalls somebody can ln -s /etc/passwd /tmp/doc.tmp. This will cause /etc/passwd being overwritten, as sysinstall runs as root. >How-To-Repeat: Run sysinstall and look at /tmp. >Fix: /var/run should be used instead of /tmp. >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199808161717.OAA01029>