*BSD News Article 17024


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!munnari.oz.au!news.Hawaii.Edu!ames!elroy.jpl.nasa.gov!swrinde!emory!sol.ctr.columbia.edu!destroyer!news.itd.umich.edu!tiamat.umd.umich.edu!crt
From: crt@tiamat.umd.umich.edu (Rob Shady)
Newsgroups: comp.os.386bsd.bugs
Subject: SUID BUG! -- There back!
Date: 11 Jun 1993 10:35:18 -0400
Organization: Univerisity of Michigan - Dearborn
Lines: 22
Message-ID: <crt.739809100@tiamat.umd.umich.edu>
NNTP-Posting-Host: cw-u01.umd.umich.edu

Okay, here is the deal.. I tried creating an account for my dialin UNIX system
that did a "chroot" to the users home directory, just to be safe for now until
I get everything set up.  Kept getting a message saying "Operation not 
permitted".  I created the file like this...

--
Filename: ~guest/bin/go.home
/usr/sbin/chroot /home/guest/guest

chown root.wheel ~guest/bin/go.home
chmod 4755 ~guest/bin/go.home
--

Anyways, come to find out that NetBSD 0.8 isn't handling the SUID bits 
properly (again).  Could someone please tell me where I can find a patch
for this?  Or at least what files to start tinkering with?

-- 
       |   IBM-PC Demo-Site Maintainer    | Super Soft Software, Inc. |
       | WASP.ENG.UFL.EDU (128.227.116.1) | Custom Hardware/Software  |
       |/\/\  Proud owner of IBM 386's, 486's, and an Amiga 1200  /\/\|