Date: Thu, 2 Nov 2000 20:10:51 -0800 From: Kris Kennaway <kris@FreeBSD.ORG> To: Garance A Drosihn <drosih@rpi.edu> Cc: Mike Heffner <mheffner@vt.edu>, Kris Kennaway <kris@FreeBSD.ORG>, audit@FreeBSD.ORG Subject: Re: sort(1) tempfile patch Message-ID: <20001102201051.A26595@citusc17.usc.edu> In-Reply-To: <p04330116b627dcf72160@[128.113.24.47]>; from drosih@rpi.edu on Thu, Nov 02, 2000 at 10:12:32PM -0500 References: <XFMail.20001102180652.mheffner@vt.edu> <p04330116b627dcf72160@[128.113.24.47]>
next in thread | previous in thread | raw e-mail | index | archive | help
--PNTmBPCT7hxwcZjr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Thu, Nov 02, 2000 at 10:12:32PM -0500, Garance A Drosihn wrote:
> At 6:06 PM -0500 11/2/00, Mike Heffner wrote:
> >It was just never applied, I had submitted a PR about it too,
> >(bin/16929) and got the reply:
> >
> >From: Tim Vanderhoek <tim@localhost.nowhere>
> > To: freebsd-gnats-submit@FreeBSD.org, spock@techfour.net
> > Subject: Re: bin/16929: [PATCH] prevent possible race condition
> > Date: Tue, 16 May 2000 00:36:58 -0400 (EDT)
> >
> > > sort can create the following predictable tempfiles:
> > > /tmp/sort{pid}{seq}
> >
> > It appears that the security implications of this have
> > already been fixed in rev.1.11 of src/gnu/usr.bin/sort/sort.c.
> >
> >so nothing was really done about it.
>=20
> Does that imply the security issue is already fixed (one
> way or another) in rev 1.11, but that we never upgraded
> to rev 1.11? I mean, if the security implications were
> addressed, then what is it that prompts Kris's update.
The security issues were not addressed.
Kris
--PNTmBPCT7hxwcZjr
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAjoCOsoACgkQWry0BWjoQKW5KACg5N45NFzAe5rxKaC4SKGO7/hr
j4gAoKYP6gjauB4iDmlcj2Nam5wX33Mr
=YSh+
-----END PGP SIGNATURE-----
--PNTmBPCT7hxwcZjr--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001102201051.A26595>