Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Mar 2002 10:10:35 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        Ernst de Haan <znerd@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: ports/www/orion Makefile ports/www/orion/files daemonctl.c orion.sh orionctl
Message-ID:  <20020328101035.A9922@xor.obsecurity.org>
In-Reply-To: <200203281452.g2SEqba01817@freefall.freebsd.org>; from znerd@FreeBSD.org on Thu, Mar 28, 2002 at 06:52:37AM -0800
References:  <200203281452.g2SEqba01817@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--sm4nu43k4a2Rpi4c
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Mar 28, 2002 at 06:52:37AM -0800, Ernst de Haan wrote:
> znerd       2002/03/28 06:52:37 PST
>=20
>   Modified files:
>     www/orion            Makefile=20
>     www/orion/files      orion.sh=20
>   Added files:
>     www/orion/files      daemonctl.c=20
>   Removed files:
>     www/orion/files      orionctl=20
>   Log:
>   Using a C program instead of a shell script for controlling
>   the server, so that we can use set the effective UID of the
>   control script.

Did you get this setuid code reviewed by anyone with security
experience prior to commit?

Kris


--sm4nu43k4a2Rpi4c
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE8o1ybWry0BWjoQKURAtvsAKDsWJz4zAM5IR1ja2oGBWiHxj8JFACg2cLD
NVcN5j08lFY9P8w1iQdmqZU=
=AcTG
-----END PGP SIGNATURE-----

--sm4nu43k4a2Rpi4c--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020328101035.A9922>