Date: Fri, 6 Apr 2001 02:11:12 -0700 (PDT) From: sw@anthologeek.net To: freebsd-gnats-submit@FreeBSD.org Subject: bin/26375: PAMized su allows non-wheel members to su root Message-ID: <200104060911.f369BCp18452@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 26375 >Category: bin >Synopsis: PAMized su allows non-wheel members to su root >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Apr 06 02:20:01 PDT 2001 >Closed-Date: >Last-Modified: >Originator: Sameh Ghane >Release: 5.0-CURRENT >Organization: >Environment: FreeBSD core.pourIX.net 5.0-CURRENT FreeBSD 5.0-CURRENT #0: Mon Apr 2 12:17:20 CEST 2001 root@core.pourIX.net:/usr/src/sys/compile/CORE i386 >Description: Compiling su.c without NOPAM, generate a binary that allows anyone to su root without the wheel-group check. >How-To-Repeat: # cd /usr/src/usr.bin/su # make # ./su <non-wheel-member-user> $ su Password: # >Fix: Compiled with the NOPAM option disable PAM authentication, and disallows users to su root if they are not in group wheel. >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104060911.f369BCp18452>