From owner-freebsd-security Thu Jul 26 14:13:55 2001 Delivered-To: freebsd-security@freebsd.org Received: from prime.gushi.org (prime.gushi.org [208.23.118.172]) by hub.freebsd.org (Postfix) with ESMTP id F3B4337B408; Thu, 26 Jul 2001 14:13:50 -0700 (PDT) (envelope-from danm@prime.gushi.org) Received: from localhost (danm@localhost) by prime.gushi.org (8.11.3/8.11.3) with ESMTP id f6QLATC17172; Thu, 26 Jul 2001 17:10:34 -0400 (EDT) Date: Thu, 26 Jul 2001 17:10:28 -0400 (EDT) From: "Dan Mahoney, System Admin" To: Kris Kennaway Cc: security@freebsd.org, security-officer@freebsd.org Subject: Re: Mistake in security advisory. In-Reply-To: <20010726130347.A49735@xor.obsecurity.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, 26 Jul 2001, Kris Kennaway wrote: > On Thu, Jul 26, 2001 at 09:19:20AM -0400, Dan Mahoney, System Admin wrote: > > > # cd /usr/src/ > > # patch -p < /path/to/patch > > # cd /usr/src/secure/libexec/telnetd > > # make depend && make all install > > > > /* This directory does NOT exist, only /usr/src/libexec/telnetd exists in > > 3.5.1-Stable */ > > Sounds like you're not cvsupping the src-secure collection, then. From the supfile: # These are the individual collections that make up FreeBSD's crypto # collection. They are no longer export-restricted and are a part of # src-all #src-crypto #src-secure #src-sys-crypto Unless for some reason I should be using the stable-secure-supfile -Dan > > > # cd /usr/src/ > > # patch -p < /path/to/patch > > # cd /usr/src/libexec/telnetd > > # make depend && make all install > > > > /* Yet this command appears to build the telnet daemon with the applied > > patches. Can someone confirm this for me? For what it's worth, the > > above advisory confused me, so I simply re-cvsupped my entire source > > tree, and then followed the instructions immediately above. */ > > This builds the non-crypto version; as I tried to explain in the > advisory, there are two slightly different versions in the tree. > > Kris > -- I want to see how you see. -SK, 6/2/99, 4:30 AM --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Web: http://prime.gushi.org finger danm@prime.gushi.org for pgp public key and tel# --------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message