From owner-cvs-all  Mon Sep 10 13:23: 6 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id 626BF37B403; Mon, 10 Sep 2001 13:22:58 -0700 (PDT)
Received: (from dillon@localhost)
	by freefall.freebsd.org (8.11.4/8.11.4) id f8AKMwJ38803;
	Mon, 10 Sep 2001 13:22:58 -0700 (PDT)
	(envelope-from dillon)
Message-Id: <200109102022.f8AKMwJ38803@freefall.freebsd.org>
From: Matt Dillon <dillon@FreeBSD.org>
Date: Mon, 10 Sep 2001 13:22:58 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/usr.bin/tip/tip Makefile src/gnu/libexec/uucp/cu
         Makefile src/gnu/libexec/uucp/uucp Makefile
         src/gnu/libexec/uucp/uuname Makefile src/gnu/libexec/uucp/uustat
         Makefile src/gnu/libexec/uucp/uux Makefile
X-FreeBSD-CVS-Branch: RELENG_4
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

dillon      2001/09/10 13:22:57 PDT

  Modified files:        (Branch: RELENG_4)
    usr.bin/tip/tip      Makefile 
    gnu/libexec/uucp/cu  Makefile 
    gnu/libexec/uucp/uucp Makefile 
    gnu/libexec/uucp/uuname Makefile 
    gnu/libexec/uucp/uustat Makefile 
    gnu/libexec/uucp/uux Makefile 
  Log:
  MFC.  Non-root-owned binaries in standard system paths, whether suid or not,
  must be chflag'd 'schg' to prevent trojans when root-cron or root or other
  users run the programs.  This works around a root trojan that exists for
  uucp binaries but does not address the other issue of config-file security
  in uucp.
  
  Approved by:	jkh
  
  Revision  Changes    Path
  1.10.6.2  +2 -1      src/usr.bin/tip/tip/Makefile
  1.8.2.1   +2 -1      src/gnu/libexec/uucp/cu/Makefile
  1.6.2.1   +2 -1      src/gnu/libexec/uucp/uucp/Makefile
  1.5.2.1   +2 -2      src/gnu/libexec/uucp/uuname/Makefile
  1.5.2.1   +2 -1      src/gnu/libexec/uucp/uustat/Makefile
  1.6.2.1   +2 -1      src/gnu/libexec/uucp/uux/Makefile


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message