Date: Wed, 4 Aug 1999 15:28:21 -0400 (EDT) From: stanislav shalunov <shalunov@att.com> To: FreeBSD-gnats-submit@freebsd.org Subject: ports/12972: new port: sysutils/stmpclean Message-ID: <199908041928.PAA28471@tuzik.lz.att.com>
next in thread | raw e-mail | index | archive | help
>Number: 12972 >Category: ports >Synopsis: new port: sysutils/stmpclean >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Wed Aug 4 12:30:01 PDT 1999 >Closed-Date: >Last-Modified: >Originator: stanislav shalunov >Release: FreeBSD 3.1-RELEASE i386 >Organization: AT&T >Environment: >Description: New port: Utility that securely cleans temporary world-writable directories. >How-To-Repeat: >Fix: # This archive contains: # # /usr/ports/sysutils/stmpclean # /usr/ports/sysutils/stmpclean/Makefile # /usr/ports/sysutils/stmpclean/files # /usr/ports/sysutils/stmpclean/files/md5 # /usr/ports/sysutils/stmpclean/pkg # /usr/ports/sysutils/stmpclean/pkg/COMMENT # /usr/ports/sysutils/stmpclean/pkg/DESCR # /usr/ports/sysutils/stmpclean/pkg/PLIST # echo c - /usr/ports/sysutils/stmpclean mkdir -p /usr/ports/sysutils/stmpclean > /dev/null 2>&1 echo x - /usr/ports/sysutils/stmpclean/Makefile sed 's/^X//' >/usr/ports/sysutils/stmpclean/Makefile << 'END-of-/usr/ports/sysutils/stmpclean/Makefile' X# New ports collection makefile for: stmpclean X# Version required: 0.1 X# Date created: 4 August 1999 X# Whom: shalunov X XDISTNAME= stmpclean-0.1 XCATEGORIES= sysutils XMASTER_SITES= ftp://ftp.mccme.ru/users/shalunov/ X XMAINTAINER= shalunov@mccme.ru XMAN8= stmpclean.8 XMANCOMPRESSED= no X X.include <bsd.port.mk> END-of-/usr/ports/sysutils/stmpclean/Makefile echo c - /usr/ports/sysutils/stmpclean/files mkdir -p /usr/ports/sysutils/stmpclean/files > /dev/null 2>&1 echo x - /usr/ports/sysutils/stmpclean/files/md5 sed 's/^X//' >/usr/ports/sysutils/stmpclean/files/md5 << 'END-of-/usr/ports/sysutils/stmpclean/files/md5' XMD5 (stmpclean-0.1.tar.gz) = ce4e4b16a0c063c9ab50d754e48bdaea END-of-/usr/ports/sysutils/stmpclean/files/md5 echo c - /usr/ports/sysutils/stmpclean/pkg mkdir -p /usr/ports/sysutils/stmpclean/pkg > /dev/null 2>&1 echo x - /usr/ports/sysutils/stmpclean/pkg/COMMENT sed 's/^X//' >/usr/ports/sysutils/stmpclean/pkg/COMMENT << 'END-of-/usr/ports/sysutils/stmpclean/pkg/COMMENT' XRemove old files from temporary directories. END-of-/usr/ports/sysutils/stmpclean/pkg/COMMENT echo x - /usr/ports/sysutils/stmpclean/pkg/DESCR sed 's/^X//' >/usr/ports/sysutils/stmpclean/pkg/DESCR << 'END-of-/usr/ports/sysutils/stmpclean/pkg/DESCR' XThe utility stmpclean securely deletes old files from directories Xsuch as /tmp and /var/tmp. X XCombining find and rm (possibly with xargs) for this purpose allows Xa local attacker to delete any file on the system. It is a security Xhole. X XUsing one of the nifty floating around Perl scripts for this purpose Xis dangerous: when you have an attack they have a tendency to behave Xlike forking bombs, making matters much worse. X X--Stanislav Xshalunov@mccme.ru END-of-/usr/ports/sysutils/stmpclean/pkg/DESCR echo x - /usr/ports/sysutils/stmpclean/pkg/PLIST sed 's/^X//' >/usr/ports/sysutils/stmpclean/pkg/PLIST << 'END-of-/usr/ports/sysutils/stmpclean/pkg/PLIST' Xsbin/stmpclean END-of-/usr/ports/sysutils/stmpclean/pkg/PLIST exit >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908041928.PAA28471>