bug#124: marked as done (setuid-wrapper is inelegant (and exploitable))

Your message dated Tue, 18 Feb 2003 20:28:41 -0800
with message-id <[email protected]>
and subject line Bug modified from CVS checkin
has caused the attached bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Nick Moffitt
(administrator, LNX-BBC bugs database)

--------------------------------------
Received: (at submit) by bugs.lnx-bbc.org; 9 Sep 2002 22:08:04 +0000
From [email protected] Mon Sep 09 15:08:04 2002
Received: from zork.zork.net ([66.92.188.166] ident=mail)
	by gar.lnx-bbc.org with esmtp (Exim 3.35 #1 (Debian))
	id 17oWhQ-0000kT-00
	for <[email protected]>; Mon, 09 Sep 2002 15:08:04 -0700
Received: from schoen by zork.zork.net with local (Exim 3.35 #1 (Debian))
	id 17oWhc-0007C7-00; Mon, 09 Sep 2002 15:08:16 -0700
Date: Mon, 9 Sep 2002 15:08:16 -0700
From: Seth David Schoen <[email protected]>
To: [email protected]
Subject: setuid-wrapper is inelegant (and exploitable)
Message-ID: <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
X-Accept-Language: en,la,eo
X-Broadcast-Flag: 1
X-Consensus-at-Lawyerpoint: http://bpdg.blogs.eff.org/
Sender: Seth David Schoen <[email protected]>

Package: bbc-provided

(1) does Linux now support setuid shell scripts at all?

(2) this approach seems inelegant to me

(3) I thought I discovered an exploit against this particular wrapper,
but it didn't work.

-- 
Seth David Schoen <[email protected]> | Reading is a right, not a feature!
     http://www.loyalty.org/~schoen/   |                 -- Kathryn Myronuk
     http://vitanuova.loyalty.org/     |

---------------------------------------
Received: (at 124-done) by bugs.lnx-bbc.org; 19 Feb 2003 04:28:41 +0000
From [email protected] Tue Feb 18 20:28:41 2003
Received: from gray by gargoyle.lnx-bbc.org with local (Exim 3.35 #1 (Debian))
	id 18lLqb-0000Ru-00
	for <[email protected]>; Tue, 18 Feb 2003 20:28:41 -0800
To: [email protected]
Subject: Bug modified from CVS checkin
Message-Id: <[email protected]>
From: Paul Gray <[email protected]>
Date: Tue, 18 Feb 2003 20:28:41 -0800

New program for setuid-wrapper, written in C.
Tested with a "local" user on a variation of the bbc locally (bootable
cluster CD) and it worked with "passwd".

Removing setuid-wrapper shell script

Closes: 124