Date: Wed, 14 May 1997 14:02:32 -0400 From: Travis Mikalson <bofh@terranova.net> To: Jonathan Mini <j_mini@efn.org> Cc: security@FreeBSD.ORG Subject: Re: /usr/sbin/wall is suid root. Message-ID: <3379FE38.4F0@TerraNova.net> References: <Pine.SUN.3.95.970513145202.9656A-100000@garcia.efn.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Jonathan Mini wrote: > > Personally, I think that being able to transmit an abatrary string of > characters to every user's console on the system is a bit of a security > hole. ANSI keyboard reassignments come to mind. On my system, running 2.2-STABLE, /usr/bin/wall is setgid tty.. -r-xr-sr-x 1 bin tty 12288 Apr 16 06:05 /usr/bin/wall What version are you running where wall is in /usr/sbin and is setuid root? Travis -- -=--==--===---====----======------=======------- TerraNovaNet Internet Services - Key Largo, FL Voice: (305)453-4011 Fax: (305)451-5991 http://www.TerraNova.net -------=======------======----====---===--==--=- Always remember that you are unique. Just like everyone else.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3379FE38.4F0>