From owner-freebsd-security Wed Nov 21 12:14: 5 2001 Delivered-To: freebsd-security@freebsd.org Received: from tomts12-srv.bellnexxia.net (tomts12.bellnexxia.net [209.226.175.56]) by hub.freebsd.org (Postfix) with ESMTP id F290337B418 for ; Wed, 21 Nov 2001 12:13:53 -0800 (PST) Received: from khan.anarcat.dyndns.org ([65.94.128.110]) by tomts12-srv.bellnexxia.net (InterMail vM.4.01.03.16 201-229-121-116-20010115) with ESMTP id <20011121201353.UPNQ7758.tomts12-srv.bellnexxia.net@khan.anarcat.dyndns.org>; Wed, 21 Nov 2001 15:13:53 -0500 Received: from shall.anarcat.dyndns.org (shall.anarcat.dyndns.org [192.168.0.1]) by khan.anarcat.dyndns.org (Postfix) with ESMTP id 4E4D01A38; Wed, 21 Nov 2001 15:15:03 -0500 (EST) Received: by shall.anarcat.dyndns.org (Postfix, from userid 1000) id 25A4720ADB; Wed, 21 Nov 2001 15:15:25 -0500 (EST) Date: Wed, 21 Nov 2001 15:15:25 -0500 From: The Anarcat To: Eric Anderson Cc: FreeBSD Security Issues Subject: Re: fun with pkg_add Message-ID: <20011121201525.GC69296@shall.anarcat.dyndns.org> Mail-Followup-To: Eric Anderson , FreeBSD Security Issues References: <20011121191808.GD44370@shall.anarcat.dyndns.org> <3BFC025D.36710154@centtech.com> <20011121194159.GA69296@shall.anarcat.dyndns.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="s9fJI615cBHmzTOP" Content-Disposition: inline In-Reply-To: <20011121194159.GA69296@shall.anarcat.dyndns.org> User-Agent: Mutt/1.3.23.2i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --s9fJI615cBHmzTOP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed Nov 21, 2001 at 02:41:59PM -0500, The Anarcat wrote: >=20 > I will open a pr about this. bin/32172: pkg_add creates its temporary directories world writable A. --s9fJI615cBHmzTOP Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjv8C1wACgkQttcWHAnWiGdqSwCgoi1C7d1NFPE9aIOxiF9uztNM kmMAnjFZ7ViT8x5B1Hhh1nDMXGRaGEAW =allH -----END PGP SIGNATURE----- --s9fJI615cBHmzTOP-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message