Re: bsd-init.txt symlink attack
Denis Kaledin <[email protected]>
| Newsgroups | gmane.linux.lfs.security |
|---|---|
| Organization | Linux From Scratch |
| Message-ID | <[email protected]> |
Matthias Benkmann wrote: > On Tue, 3 Dec 2002 06:21:58 +0100 (CET) Wouter Van Hemel <[email protected]> > wrote: > > >>These lines in the bsd-init.txt hint allow a symlink attack: >> >>Sorry for the crosspost, I don't know who I should send this to for a >>fix. > > > How about (from the header of bsd-init.txt): > > AUTHOR: Marc Heerdink <[email protected]> > > > All hints are either maintained by their specific authors or not > maintained at all. In special cases you can ask the hint editors (see > hints.linuxfromscratch.org for mail addresses), but unless the author is > unreachable and a change is very important (or trivial) they won't usually > mess with hints without the author's consent. > > MSB Well, the only mainstream distro that is using BSD-style inits at the moment is Slackware. In Slackware, the random-seed is saved in /etc. Denis A. Kaledin AKA "Buffet" LFS user #5903 -- Unsubscribe: send email to [email protected] and put 'unsubscribe lfs-security' in the subject header of the message