From owner-freebsd-ports Wed Aug 4 12:30:30 1999 Delivered-To: freebsd-ports@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id 497281540A for ; Wed, 4 Aug 1999 12:30:28 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.9.3/8.9.2) id MAA36716; Wed, 4 Aug 1999 12:30:01 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: from att.com (kcgw1.att.com [192.128.133.151]) by hub.freebsd.org (Postfix) with SMTP id 1B05B15403 for ; Wed, 4 Aug 1999 12:26:37 -0700 (PDT) (envelope-from shalunov@tuzik.lz.att.com) Received: from kcig1.att.att.com by kcgw1.att.com (AT&T/IPNS/UPAS-1.0) for freebsd.org!freebsd-gnats-submit sender tuzik.lz.att.com!shalunov (tuzik.lz.att.com!shalunov); Wed Aug 4 14:26 CDT 1999 Received: from tuzik.lz.att.com (tuzik.lz.att.com [135.25.200.84]) by kcig1.att.att.com (AT&T/IPNS/GW-1.0) with ESMTP id OAA27493 for ; Wed, 4 Aug 1999 14:26:13 -0500 (CDT) Received: (from root@localhost) by tuzik.lz.att.com (8.9.2/8.9.2) id PAA28471; Wed, 4 Aug 1999 15:28:21 -0400 (EDT) (envelope-from shalunov) Message-Id: <199908041928.PAA28471@tuzik.lz.att.com> Date: Wed, 4 Aug 1999 15:28:21 -0400 (EDT) From: stanislav shalunov To: FreeBSD-gnats-submit@freebsd.org X-Send-Pr-Version: 3.2 Subject: ports/12972: new port: sysutils/stmpclean Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Number: 12972 >Category: ports >Synopsis: new port: sysutils/stmpclean >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-ports >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Wed Aug 4 12:30:01 PDT 1999 >Closed-Date: >Last-Modified: >Originator: stanislav shalunov >Release: FreeBSD 3.1-RELEASE i386 >Organization: AT&T >Environment: >Description: New port: Utility that securely cleans temporary world-writable directories. >How-To-Repeat: >Fix: # This archive contains: # # /usr/ports/sysutils/stmpclean # /usr/ports/sysutils/stmpclean/Makefile # /usr/ports/sysutils/stmpclean/files # /usr/ports/sysutils/stmpclean/files/md5 # /usr/ports/sysutils/stmpclean/pkg # /usr/ports/sysutils/stmpclean/pkg/COMMENT # /usr/ports/sysutils/stmpclean/pkg/DESCR # /usr/ports/sysutils/stmpclean/pkg/PLIST # echo c - /usr/ports/sysutils/stmpclean mkdir -p /usr/ports/sysutils/stmpclean > /dev/null 2>&1 echo x - /usr/ports/sysutils/stmpclean/Makefile sed 's/^X//' >/usr/ports/sysutils/stmpclean/Makefile << 'END-of-/usr/ports/sysutils/stmpclean/Makefile' X# New ports collection makefile for: stmpclean X# Version required: 0.1 X# Date created: 4 August 1999 X# Whom: shalunov X XDISTNAME= stmpclean-0.1 XCATEGORIES= sysutils XMASTER_SITES= ftp://ftp.mccme.ru/users/shalunov/ X XMAINTAINER= shalunov@mccme.ru XMAN8= stmpclean.8 XMANCOMPRESSED= no X X.include END-of-/usr/ports/sysutils/stmpclean/Makefile echo c - /usr/ports/sysutils/stmpclean/files mkdir -p /usr/ports/sysutils/stmpclean/files > /dev/null 2>&1 echo x - /usr/ports/sysutils/stmpclean/files/md5 sed 's/^X//' >/usr/ports/sysutils/stmpclean/files/md5 << 'END-of-/usr/ports/sysutils/stmpclean/files/md5' XMD5 (stmpclean-0.1.tar.gz) = ce4e4b16a0c063c9ab50d754e48bdaea END-of-/usr/ports/sysutils/stmpclean/files/md5 echo c - /usr/ports/sysutils/stmpclean/pkg mkdir -p /usr/ports/sysutils/stmpclean/pkg > /dev/null 2>&1 echo x - /usr/ports/sysutils/stmpclean/pkg/COMMENT sed 's/^X//' >/usr/ports/sysutils/stmpclean/pkg/COMMENT << 'END-of-/usr/ports/sysutils/stmpclean/pkg/COMMENT' XRemove old files from temporary directories. END-of-/usr/ports/sysutils/stmpclean/pkg/COMMENT echo x - /usr/ports/sysutils/stmpclean/pkg/DESCR sed 's/^X//' >/usr/ports/sysutils/stmpclean/pkg/DESCR << 'END-of-/usr/ports/sysutils/stmpclean/pkg/DESCR' XThe utility stmpclean securely deletes old files from directories Xsuch as /tmp and /var/tmp. X XCombining find and rm (possibly with xargs) for this purpose allows Xa local attacker to delete any file on the system. It is a security Xhole. X XUsing one of the nifty floating around Perl scripts for this purpose Xis dangerous: when you have an attack they have a tendency to behave Xlike forking bombs, making matters much worse. X X--Stanislav Xshalunov@mccme.ru END-of-/usr/ports/sysutils/stmpclean/pkg/DESCR echo x - /usr/ports/sysutils/stmpclean/pkg/PLIST sed 's/^X//' >/usr/ports/sysutils/stmpclean/pkg/PLIST << 'END-of-/usr/ports/sysutils/stmpclean/pkg/PLIST' Xsbin/stmpclean END-of-/usr/ports/sysutils/stmpclean/pkg/PLIST exit >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message