Date: Mon, 27 Jun 2005 17:24:41 +0000 (UTC) From: Joe Marcus Clarke <marcus@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/x11/gdm Makefile ports/x11/gdm/files patch-daemon_slave.c Message-ID: <200506271724.j5RHOfuq083531@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
marcus 2005-06-27 17:24:41 UTC
FreeBSD ports repository
Modified files:
x11/gdm Makefile
x11/gdm/files patch-daemon_slave.c
Log:
Correct a severe security issue if a user without a home directory logs in
via GDM. In such a case, the user would have had root:gdm privileges.
This is now fixed by correctly changing back to the user's uid:gid.
Submitted by: Pawel Worach <pawel.worach@gmail.com>
Obtained from: http://bugzilla.gnome.org/show_bug.cgi?id=308050
Security: This fixes a potential privilege escalation problem
Revision Changes Path
1.52 +1 -1 ports/x11/gdm/Makefile
1.2 +41 -8 ports/x11/gdm/files/patch-daemon_slave.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200506271724.j5RHOfuq083531>