Date: Wed, 4 Oct 2000 02:14:26 -0700 From: Kris Kennaway <kris@FreeBSD.org> To: Dima Dorfman <dima@unixfreak.org> Cc: Mike Silbersack <silby@silby.com>, security@freebsd.org Subject: Re: BSD chpass (fwd) Message-ID: <20001004021426.A74690@freefall.freebsd.org> In-Reply-To: <20001004053422.8A3901F19@static.unixfreak.org>; from dima@unixfreak.org on Tue, Oct 03, 2000 at 10:34:22PM -0700 References: <Pine.BSF.4.21.0010040014430.35500-100000@achilles.silby.com> <20001004053422.8A3901F19@static.unixfreak.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Oct 03, 2000 at 10:34:22PM -0700, Dima Dorfman wrote:
> > For those not subscribed to bugtraq, it's time to remove the suid bit on
> > chpass.
>
> Unfortunatly it isn't that easy if you're running with securelevel > 0
> since chpass is installed with the schg (system immutable) flag on by
> default. Oh well, guess it's time to reboot some hosts. :-/
mv it into a mode 000 directory :-)
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <forsythe@alum.mit.edu>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001004021426.A74690>