From owner-freebsd-security Fri Jul 20 1:42:33 2001 Delivered-To: freebsd-security@freebsd.org Received: from ringworld.nanolink.com (ringworld.nanolink.com [195.24.48.39]) by hub.freebsd.org (Postfix) with SMTP id BC6D137B401 for ; Fri, 20 Jul 2001 01:42:29 -0700 (PDT) (envelope-from roam@orbitel.bg) Received: (qmail 57172 invoked by uid 1000); 20 Jul 2001 08:46:28 -0000 Date: Fri, 20 Jul 2001 11:46:27 +0300 From: Peter Pentchev To: Richard Lucas Cc: security@freebsd.org Subject: Re: [PATCH] Re: FreeBSD remote root exploit ? Message-ID: <20010720114627.A25689@ringworld.oblivion.bg> Mail-Followup-To: Richard Lucas , security@freebsd.org References: <20010719120538.E43977@xor.obsecurity.org> <20010719152558.G24980-100000@mx2.threeh.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010719152558.G24980-100000@mx2.threeh.com>; from rlucas@solidcomputing.com on Thu, Jul 19, 2001 at 03:28:20PM -0500 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, Jul 19, 2001 at 03:28:20PM -0500, Richard Lucas wrote: > Ok in the emails I've read so far there has been 3 different paths listed > on where to apply this patch. Can someone say for sure where it goes? > > /usr/src/crypo/telnet/telnetd/ > /usr/src/libexec/telnetd/ > /usr/src/secure/libexec/telnetd/ > > I have nothing in the last one except a Makefile so obviously that isn't > going to work. Actually, as people have already stated, it is exactly the last one which is the correct one to *rebuild*. Having just a Makefile does not mean that this particular Makefile does not reference sources in other directories; this is the case with pretty much everything in src/secure - most of it references sources in src/crypto. So, patch in src/crypto, rebuild in src/secure... and never ignore 'just a Makefile' again :P G'luck, Peter -- I had to translate this sentence into English because I could not read the original Sanskrit. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message