d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

New release note: Non-root-owned binaries in standard system paths

Browse Source 
now have the schg flag set.
This commit is contained in:
bmah 2001-09-10 18:51:13 +00:00
parent 808da37f93
commit d0a67ff6c2
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
release/doc/en_US.ISO8859-1/relnotes/article.sgml
View File

@ -1067,6 +1067,12 @@ hw.pcic.irq="0"</programlisting>
<para>A race condition in &man.rmuser.8; that briefly exposed a
world-readable <filename>/etc/master.passwd</filename> has been
fixed (see security advisory FreeBSD-SA-01:59). &merged;</para>
<para>All non-<username>root</username>-owned binaries in standard
system paths now have the <literal>schg</literal> flag set to
prevent exploit vectors when run by &man.cron.8;, by
<username>root</username>, or by a user other then the one owning
the binary.</para>
</sect2>
<sect2 id="userland">
<title>Userland Changes</title>

6
release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
View File

@ -1067,6 +1067,12 @@ hw.pcic.irq="0"</programlisting>
<para>A race condition in &man.rmuser.8; that briefly exposed a
world-readable <filename>/etc/master.passwd</filename> has been
fixed (see security advisory FreeBSD-SA-01:59). &merged;</para>
<para>All non-<username>root</username>-owned binaries in standard
system paths now have the <literal>schg</literal> flag set to
prevent exploit vectors when run by &man.cron.8;, by
<username>root</username>, or by a user other then the one owning
the binary.</para>
</sect2>
<sect2 id="userland">
<title>Userland Changes</title>