From owner-cvs-sbin  Fri May 17 02:32:26 1996
Return-Path: owner-cvs-sbin
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id CAA02024
          for cvs-sbin-outgoing; Fri, 17 May 1996 02:32:26 -0700 (PDT)
Received: from Root.COM (implode.Root.COM [198.145.90.17])
          by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id CAA02016;
          Fri, 17 May 1996 02:32:21 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by Root.COM (8.7.5/8.6.5) with SMTP id CAA04114; Fri, 17 May 1996 02:32:25 -0700 (PDT)
Message-Id: <199605170932.CAA04114@Root.COM>
X-Authentication-Warning: implode.Root.COM: Host localhost [127.0.0.1] didn't use HELO protocol
To: "Jordan K. Hubbard" <jkh@freefall.freebsd.org>
cc: CVS-committers@freefall.freebsd.org, cvs-all@freefall.freebsd.org,
        cvs-sbin@freefall.freebsd.org
Subject: Re: cvs commit: src/sbin Makefile 
In-reply-to: Your message of "Fri, 17 May 1996 01:48:54 PDT."
             <199605170848.BAA28627@freefall.freebsd.org> 
From: David Greenman <davidg@Root.COM>
Reply-To: davidg@Root.COM
Date: Fri, 17 May 1996 02:32:25 -0700
Sender: owner-cvs-sbin@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

>jkh         96/05/17 01:48:53
>
>  Modified:    sbin      Makefile
>  Log:
>  Large security hole in mount_union, the underlying filesystem for which doesn't
>  even work.  Until pst wakes up, best action deemed to be the simple disabling
>  of this command.

   It would have been better to install it without suid root so that the
permissions get changed when people next do a "make world".

-DG

David Greenman
Core-team/Principal Architect, The FreeBSD Project