From owner-cvs-all Mon Jun 19 18:41:34 2000 Delivered-To: cvs-all@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id 90B7A37B9AA; Mon, 19 Jun 2000 18:41:27 -0700 (PDT) (envelope-from kris@FreeBSD.org) Received: (from kris@localhost) by freefall.freebsd.org (8.9.3/8.9.2) id SAA82886; Mon, 19 Jun 2000 18:41:27 -0700 (PDT) (envelope-from kris@FreeBSD.org) Message-Id: <200006200141.SAA82886@freefall.freebsd.org> From: Kris Kennaway Date: Mon, 19 Jun 2000 18:41:27 -0700 (PDT) To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/misc/splitvt Makefile X-FreeBSD-CVS-Branch: HEAD Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG kris 2000/06/19 18:41:27 PDT Modified files: misc/splitvt Makefile Log: Mark FORBIDDEN because the splitvt binary is not installed setuid, therefore it can't change the permissions on the child tty and leaves it world readable/writable. Furthermore, there's a buffer overflow when the binary *is* setuid. Submitted by: Joey Hess Revision Changes Path 1.11 +3 -1 ports/misc/splitvt/Makefile To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message