From owner-freebsd-security  Tue Jun  3 15:01:30 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id PAA25785
          for security-outgoing; Tue, 3 Jun 1997 15:01:30 -0700 (PDT)
Received: from mexico.brainstorm.eu.org (root@mexico.brainstorm.fr [193.56.58.253])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id PAA25766
          for <freebsd-security@FreeBSD.ORG>; Tue, 3 Jun 1997 15:01:15 -0700 (PDT)
Received: from brasil.brainstorm.eu.org (brasil.brainstorm.fr [193.56.58.33])
          by mexico.brainstorm.eu.org (8.8.4/8.8.4) with ESMTP
	  id AAA03572 for <freebsd-security@FreeBSD.ORG>; Wed, 4 Jun 1997 00:00:57 +0200
Received: (from uucp@localhost) by brasil.brainstorm.eu.org (8.8.4/8.6.12) with UUCP id AAA08233 for freebsd-security@FreeBSD.ORG; Wed, 4 Jun 1997 00:00:55 +0200
Received: (from roberto@localhost) by keltia.freenix.fr (8.8.5/keltia-uucp-2.9) id WAA28752;
          Tue, 3 Jun 1997 22:03:29 +0200 (CEST)
Message-ID: <19970603220329.48559@keltia.freenix.fr>
Date: Tue, 3 Jun 1997 22:03:29 +0200
From: Ollivier Robert <roberto@keltia.freenix.fr>
To: freebsd-security@FreeBSD.ORG
Subject: Re: Security problem with FreeBSD 2.2.1 default installation
References: <Pine.HPP.3.96.970603103342.16150G-100000@sunfire.cs.iastate.edu> <199706031651.SAA24768@wicx20.informatik.uni-wuerzburg.de> <199706031731.LAA02257@elara.frii.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.67
In-Reply-To: <199706031731.LAA02257@elara.frii.com>; from gnat@frii.com on Tue, Jun 03, 1997 at 11:31:31AM -0600
X-Operating-System: FreeBSD 3.0-CURRENT ctm#3332 AMD-K6 MMX @ 208 MHz
Sender: owner-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

According to gnat@frii.com:
> I have a question: because 2.2 and 2.1 seem to have /dev/fd/n where n
> is a file descriptor number, does this mean that FreeBSD doesn't need
> a suidperl because setuid scripts are now safe in the kernel?

Support for setuid scripts is still disabled in the kernel even though we
could have it securely... We just need someone to implement it correctly.
-- 
Ollivier ROBERT -=- FreeBSD: There are no limits -=- roberto@keltia.freenix.fr
FreeBSD keltia.freenix.fr 3.0-CURRENT #17: Sat May 31 18:55:45 CEST 1997