Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Aug 1999 11:33:30 -0600
From:      Warner Losh <imp@village.org>
To:        Mike Tancsa <mike@sentex.net>
Cc:        freebsd-security@FreeBSD.ORG, security-officer@FreeBSD.ORG
Subject:   Re: New exploit ? Patch ? (from BUGTRAQ Aug26 1999) 
Message-ID:  <199908261733.LAA65999@harmony.village.org>
In-Reply-To: Your message of "Thu, 26 Aug 1999 12:55:00 EDT." <3.0.5.32.19990826125500.01d258a0@staff.sentex.ca> 
References:  <3.0.5.32.19990826125500.01d258a0@staff.sentex.ca>  

index | next in thread | previous in thread | raw e-mail

The quick and dirty workaround for this would be to move
/usr/sbin/periodic to /usr/sbin/periodic.bin.  Replace
/usr/sbin/periodic with

#!/bin/sh
limits -c 0
/usr/sbin/periodic.bin $*

Both the bug in the fts library and the dumping to core dumps through
symbolic links which together conspire to have this bug are being
fixed and there should be real commits soon.  

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199908261733.LAA65999>