Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Feb 1997 09:14:38 +0200 (SAT)
From:      Reinier Bezuidenhout <rbezuide@oskar.nanoteq.co.za>
To:        jas@flyingfox.COM (Jim Shankland)
Cc:        security@freebsd.org
Subject:   Re: Coredumps and setuids .. interesting..
Message-ID:  <199702190714.JAA22361@oskar.nanoteq.co.za>
In-Reply-To: <199702190649.WAA16181@saguaro.flyingfox.com> from Jim Shankland at "Feb 18, 97 10:49:22 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> David Greenman writes, re coredumping setuid processes:
> 
> > Hmmm. Either my replies aren't getting through to bugtraq, or
> > people are just ignoring them. As of FreeBSD 2.1.6 and newer
> > versions, we don't core dump for setuid processes. It's been
> > this way for nearly a year in -current, but the change didn't
> > get merged into the 2.1.x branch until after the 2.1.5
> > release...that was an oversight.

This is weird ... I have a 2.1.0 machine that I upgraded to a
2.1.6.1 machine just before 2.1.6 was "freezed".  I tried the
rlogin coredump thingy and it did work.  I could see ALL the
users AND their passwords :/

> And I tried it out on an old laptop that still has 2.1.0-951104-SNAP,
> and it wouldn't dump the core of a setuid process.  (I don't have
> a 2.1.5 system to try it out on.)

Then it gor broke somewhere again ?


Reinier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199702190714.JAA22361>