From owner-freebsd-security Wed Nov 18 07:56:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA22561 for freebsd-security-outgoing; Wed, 18 Nov 1998 07:56:09 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from cc181716-a.hwrd1.md.home.com (cc181716-a.hwrd1.md.home.com [24.3.18.63]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA22555 for ; Wed, 18 Nov 1998 07:56:06 -0800 (PST) (envelope-from woodford@cc181716-a.hwrd1.md.home.com) Received: from localhost (woodford@localhost) by cc181716-a.hwrd1.md.home.com (8.9.1a/8.9.1a) with SMTP id LAA04776 for ; Wed, 18 Nov 1998 11:00:54 -0500 (EST) Date: Wed, 18 Nov 1998 11:00:53 -0500 (EST) From: Bill Woodford To: freebsd-security@FreeBSD.ORG Subject: Re: Would this make FreeBSD more secure? In-Reply-To: <199811172222.QAA12303@s07.sa.fedex.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Tue, 17 Nov 1998, William McVey wrote: | Bill Woodford wrote: | >I think this is a good idea. The change in perms didnt seem to affect | >anything else in a bad way, and it got rid of a setuid. Andre, thanks | >for posting it! | | Did this work for you? Can you actually "break" your xlock? It | didn't work for me when I did it originally because getpwnam, which Ah geez. Sorry guys. I thought it was working, but I had an older version of xlock in my path. When I ran the proper xlock with the permissions, I couldnt break the xlock. | is what xlock apparently calls, only returns the shadow'ed encrypted | password entry if geteuid() returns 0 (at least this is how FreeBSD | 2.2.5 is does it (my 3.0 machine is suffering from hardware problems | right now). I posted a proposed "fix" for this, which no-one has | really commented on. Post it again, please :) I missed it. -- Bill Woodford * woodford@cc181716-a.hwrd1.md.home.com * ICQ:14076169 Volunteer Coordinator, Otakon 99: Convention of Otaku Generation "Windows Multitasking: Messing up several things at once." To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message