From owner-cvs-ports@FreeBSD.ORG Mon Jun 27 17:24:41 2005 Return-Path: X-Original-To: cvs-ports@FreeBSD.org Delivered-To: cvs-ports@FreeBSD.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5B9F116A41C; Mon, 27 Jun 2005 17:24:41 +0000 (GMT) (envelope-from marcus@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4892F43D1F; Mon, 27 Jun 2005 17:24:41 +0000 (GMT) (envelope-from marcus@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.13.1/8.13.1) with ESMTP id j5RHOfmv083532; Mon, 27 Jun 2005 17:24:41 GMT (envelope-from marcus@repoman.freebsd.org) Received: (from marcus@localhost) by repoman.freebsd.org (8.13.1/8.13.1/Submit) id j5RHOfuq083531; Mon, 27 Jun 2005 17:24:41 GMT (envelope-from marcus) Message-Id: <200506271724.j5RHOfuq083531@repoman.freebsd.org> From: Joe Marcus Clarke Date: Mon, 27 Jun 2005 17:24:41 +0000 (UTC) To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Cc: Subject: cvs commit: ports/x11/gdm Makefile ports/x11/gdm/files patch-daemon_slave.c X-BeenThere: cvs-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2005 17:24:41 -0000 marcus 2005-06-27 17:24:41 UTC FreeBSD ports repository Modified files: x11/gdm Makefile x11/gdm/files patch-daemon_slave.c Log: Correct a severe security issue if a user without a home directory logs in via GDM. In such a case, the user would have had root:gdm privileges. This is now fixed by correctly changing back to the user's uid:gid. Submitted by: Pawel Worach Obtained from: http://bugzilla.gnome.org/show_bug.cgi?id=308050 Security: This fixes a potential privilege escalation problem Revision Changes Path 1.52 +1 -1 ports/x11/gdm/Makefile 1.2 +41 -8 ports/x11/gdm/files/patch-daemon_slave.c