From owner-freebsd-security Thu Aug 26 16:34:36 1999 Delivered-To: freebsd-security@freebsd.org Received: from phoenix.aye.net (phoenix.aye.net [206.185.8.134]) by hub.freebsd.org (Postfix) with SMTP id C11EE15482 for ; Thu, 26 Aug 1999 16:34:27 -0700 (PDT) (envelope-from barrett@phoenix.aye.net) Received: (qmail 16336 invoked by uid 1000); 26 Aug 1999 23:25:33 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 26 Aug 1999 23:25:33 -0000 Date: Thu, 26 Aug 1999 19:25:33 -0400 (EDT) From: Barrett Richardson To: Warner Losh Cc: dg@root.com, dima@best.net, Gregory Sutter , security-officer@FreeBSD.ORG, freebsd-security@FreeBSD.ORG Subject: Re: [secure@FREEBSD.LUBLIN.PL: FreeBSD (and other BSDs?) local root explot] In-Reply-To: <199908262213.QAA68314@harmony.village.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 26 Aug 1999, Warner Losh wrote: > In message <199908262056.NAA03100@implode.root.com> David Greenman writes: > : Yikes, you're not proposing that we disable following of symlinks that > : point to binaries, are you? > > No. Just following symlinks when dumping core. > > Warner > On Digital Unix where core dumps are a big problem with setuid binaries and the symlink issue, core dumps are disabled on binaries that do not have a read bit set. This offers an "on the fly" workaround. - Barrett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message