Article View: comp.sys.ibm.pc.rt
Article #164Patch for /sys/kern_exec.c
From: brunner
Date: Mon, 24 Jul 1989 22:00
Date: Mon, 24 Jul 1989 22:00
34 lines
1492 bytes
1492 bytes
Subject: setuid/setgid shell scripts are a security risk Index: sys/kern_exec.c IBM/4.3 Description: Setuid/setgid shell scripts have inherent problems that may be used to violate security. These problems cannot be fixed without completely revising the semantics of executable shell scripts. This patch is consistent with the patch made by Berkeley. Fix: Panel your office in asbestos, and apply the following patch to sys/kern_exec.c. *** kern_exec.c.orig Mon Jul 10 14:47:20 1989 --- kern_exec.c Mon Jul 10 14:55:16 1989 *************** *** 349,354 **** --- 349,359 ---- bcopy((caddr_t)ndp->ni_dent.d_name, (caddr_t)cfname, MAXCOMLEN); cfname[MAXCOMLEN] = '\0'; + #ifdef UCBFIX + /* This is UCBFIX 1.59, there are no other UCBFIX ifdef's in this file. */ + uid = u.u_uid; /* shell scripts can't be setuid */ + gid = u.u_gid; + #endif UCBFIX #else !VFS VN_RELE(vp); vp = (struct vnode *)0; Eric Brunner uunet!ibmsupt!brunner
Technical Details
Message-ID:
<1513@ibmpa.UUCP>Path:
arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!csd4.milw.wisc.edu!cs.utexas.edu!uunet!ibmpa!bullhead!brunnerReferences:
<1511@ibmpa.UUCP>Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!utzoo!utgpu!jarvis.csri.toronto.edu!mailrus!csd4.milw.wisc.edu!cs.utexas.edu!uunet!ibmpa!bullhead!brunner
From: brunner@bullhead.uucp
Newsgroups: comp.sys.ibm.pc.rt
Subject: Patch for /sys/kern_exec.c
Summary: Fixes set{u,g}id security hole
Keywords: V1.8 security shell script
Message-ID: <1513@ibmpa.UUCP>
Date: 24 Jul 89 22:00:30 GMT
References: <1511@ibmpa.UUCP>
Sender: news@ibmpa.UUCP
Reply-To: brunner@ibmsupt.UUCP ()
Organization: IBM AWD Palo Alto
Lines: 34