From owner-freebsd-security  Wed Oct  4 12:17: 3 2000
Delivered-To: freebsd-security@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id ADE2637B502; Wed,  4 Oct 2000 12:17:01 -0700 (PDT)
Received: (from kris@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id MAA76265;
	Wed, 4 Oct 2000 12:17:01 -0700 (PDT)
	(envelope-from kris@FreeBSD.org)
Date: Wed, 4 Oct 2000 12:17:01 -0700
From: Kris Kennaway <kris@FreeBSD.org>
To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Cc: Kris Kennaway <kris@FreeBSD.ORG>,
	Dima Dorfman <dima@unixfreak.org>,
	Alfred Perlstein <bright@wintelcom.net>,
	Mike Silbersack <silby@silby.com>, security@FreeBSD.ORG
Subject: Re: BSD chpass (fwd)
Message-ID: <20001004121701.C73561@freefall.freebsd.org>
References: <20001004021948.A76230@freefall.freebsd.org> <20001004092758.335931F0A@static.unixfreak.org> <20001004023249.B76230@freefall.freebsd.org> <200010041447.KAA54350@khavrinen.lcs.mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200010041447.KAA54350@khavrinen.lcs.mit.edu>; from wollman@khavrinen.lcs.mit.edu on Wed, Oct 04, 2000 at 10:47:15AM -0400
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Wed, Oct 04, 2000 at 10:47:15AM -0400, Garrett Wollman wrote:
> <<On Wed, 4 Oct 2000 02:32:49 -0700, Kris Kennaway <kris@FreeBSD.ORG> said:
> 
> > I think you're right. Which is a good reason why your /usr/bin should
> > be schg too ;-)
> 
> Actually, sappnd on all the directories which might be in (or on the
> way to) root's path would be enough.

Except you can still just mount a doctored copy over the top of it :-)

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe@alum.mit.edu>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message