Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jun 1999 00:24:21 -0600
From:      Warner Losh <imp@harmony.village.org>
To:        "Jason L. Schwab" <jschwab@royal.net>
Cc:        freebsd-questions@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
Subject:   Re: reading files. 
Message-ID:  <199906150624.AAA90467@harmony.village.org>
In-Reply-To: Your message of "Sun, 13 Jun 1999 14:46:37 MDT." <Pine.BSF.4.10.9906131445410.7278-100000@fkr.dynip.com> 
References:  <Pine.BSF.4.10.9906131445410.7278-100000@fkr.dynip.com>  

next in thread | previous in thread | raw e-mail | index | archive | help
In message <Pine.BSF.4.10.9906131445410.7278-100000@fkr.dynip.com> "Jason L. Schwab" writes:
: I heard that there is a way to read any file on a freebsd system as a
: normal non-root user.. is this true? if so can some one give me some info
: on this? thanks.

To the best of my knowledge, this is not correct in the current
versions of FreeBSD.  There have been bugs in prior versions which
might allow this to happen.  I don't think there are any in 2.2.8
even.

Some of these bugs were very specific and required another user to do
something and a race to be lost.  Others required a sloppily
programmed setuid program, with or without the same races.

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199906150624.AAA90467>