From owner-cvs-etc  Sun Aug 25 22:26:04 1996
Return-Path: owner-cvs-etc
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id WAA19025
          for cvs-etc-outgoing; Sun, 25 Aug 1996 22:26:04 -0700 (PDT)
Received: from GndRsh.aac.dev.com (GndRsh.aac.dev.com [198.145.92.241])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id WAA19010;
          Sun, 25 Aug 1996 22:25:50 -0700 (PDT)
Received: (from rgrimes@localhost) by GndRsh.aac.dev.com (8.6.12/8.6.12) id WAA18244; Sun, 25 Aug 1996 22:25:14 -0700
From: "Rodney W. Grimes" <rgrimes@GndRsh.aac.dev.com>
Message-Id: <199608260525.WAA18244@GndRsh.aac.dev.com>
Subject: Re: cvs commit:  src/etc/mtree BSD.var.dist src/usr.sbin/rwhod rwhod.c
To: pst@freefall.freebsd.org (Paul Traina)
Date: Sun, 25 Aug 1996 22:25:14 -0700 (PDT)
Cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org,
        cvs-etc@freefall.freebsd.org, cvs-usrsbin@freefall.freebsd.org
In-Reply-To: <199608252137.OAA10073@freefall.freebsd.org> from Paul Traina at "Aug 25, 96 02:37:14 pm"
X-Mailer: ELM [version 2.4ME+ PL11 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-etc@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> pst         96/08/25 14:37:12
> 
>   Modified:    etc/mtree  BSD.var.dist
>                usr.sbin/rwhod  rwhod.c
>   Log:
>   Fix buffer overrun, and run as nobody

Hummm... I take it that you set /var/rwho nobody:whoever mode 755, which
now means /var/rwho is open for writting into if /var is NFS exported...
and all the datafiles will be smashable by other NFS hosts :-(.


-- 
Rod Grimes                                      rgrimes@gndrsh.aac.dev.com
Accurate Automation Company                 Reliable computers for FreeBSD