Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 25 Aug 1996 22:25:14 -0700 (PDT)
From:      "Rodney W. Grimes" <rgrimes@GndRsh.aac.dev.com>
To:        pst@freefall.freebsd.org (Paul Traina)
Cc:        CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org, cvs-etc@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org
Subject:   Re: cvs commit:  src/etc/mtree BSD.var.dist src/usr.sbin/rwhod rwhod.c
Message-ID:  <199608260525.WAA18244@GndRsh.aac.dev.com>
In-Reply-To: <199608252137.OAA10073@freefall.freebsd.org> from Paul Traina at "Aug 25, 96 02:37:14 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> pst         96/08/25 14:37:12
> 
>   Modified:    etc/mtree  BSD.var.dist
>                usr.sbin/rwhod  rwhod.c
>   Log:
>   Fix buffer overrun, and run as nobody

Hummm... I take it that you set /var/rwho nobody:whoever mode 755, which
now means /var/rwho is open for writting into if /var is NFS exported...
and all the datafiles will be smashable by other NFS hosts :-(.


-- 
Rod Grimes                                      rgrimes@gndrsh.aac.dev.com
Accurate Automation Company                 Reliable computers for FreeBSD



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199608260525.WAA18244>