git: 118191c692f3 - main - sysutils/screen*: MULTIUSER is now non-default
Cy Schubert <[email protected]>
| Newsgroups | gmane.os.freebsd.devel.cvs.ports |
|---|---|
| Message-ID | <[email protected]> |
The branch main has been updated by cy: URL: https://cgit.FreeBSD.org/ports/commit/?id=118191c692f3334111bf691fc993e75d46fe4ea5 commit 118191c692f3334111bf691fc993e75d46fe4ea5 Author: Cy Schubert <[email protected]> AuthorDate: 2026-08-14 16:55:34 +0000 Commit: Cy Schubert <[email protected]> CommitDate: 2026-08-14 17:02:01 +0000 sysutils/screen*: MULTIUSER is now non-default MULTIUSER requires a setuid root screen binary. Not many people use this feature anymore so let's disable it by default. If people do want MULTIUSER screen they should either set the option or manually add the setuid bit to the screen binary. Reported by: sjg --- UPDATING | 10 ++++++++++ sysutils/screen-devel/Makefile | 2 +- sysutils/screen/Makefile | 3 ++- 3 files changed, 13 insertions(+), 2 deletions(-) diff --git a/UPDATING b/UPDATING index bdcb3ab1b7dd..b23d6791bf10 100644 --- a/UPDATING +++ b/UPDATING @@ -5,6 +5,16 @@ they are unavoidable. You should get into the habit of checking this file for changes each time you update your ports collection, before attempting any port upgrades. +20260814: + AFFECTS: users of sysutils/screen* + AUTHOR: [email protected] + + sysutils/screen no longer sets the MULTUSER option by default anymore. + MUTIUSER installs a setuid root screen binary. This introduces an exploit + vector. Users who need multi-user functionality should either build + screen with the MULTIUSER option or binary package users should add the + setuid bit to the screen binary. + 20260813: AFFECTS: users of security/openssh-portable AUTHOR: [email protected] diff --git a/sysutils/screen-devel/Makefile b/sysutils/screen-devel/Makefile index d8ccda377cea..568c6a19c668 100644 --- a/sysutils/screen-devel/Makefile +++ b/sysutils/screen-devel/Makefile @@ -23,7 +23,7 @@ LICENSE= GPLv3 OPTIONS_DEFINE= INFO NETHACK XTERM_256 SYSTEM_SCREENRC MULTIUSER \ NOSOCKETDIR OPTIONS_DEFAULT= INFO NETHACK XTERM_256 SOCKETS SYSTEM_SCREENRC \ - NCURSES_DEFAULT MULTIUSER + NCURSES_DEFAULT OPTIONS_SINGLE= IPC NCURSES OPTIONS_SINGLE_IPC= SOCKETS NAMED_PIPES OPTIONS_SINGLE_NCURSES= NCURSES_DEFAULT NCURSES_BASE NCURSES_PORT diff --git a/sysutils/screen/Makefile b/sysutils/screen/Makefile index b59760a77970..3743fc5d86df 100644 --- a/sysutils/screen/Makefile +++ b/sysutils/screen/Makefile @@ -1,5 +1,6 @@ PORTNAME= screen DISTVERSION= 5.0.2 +PORTREVISION= 1 CATEGORIES= sysutils MASTER_SITES= GNU \ ftp://ftp.gnu.org/gnu/screen/ \ @@ -21,7 +22,7 @@ LICENSE= GPLv3 OPTIONS_DEFINE= INFO SYSTEM_SCREENRC MULTIUSER \ NOSOCKETDIR OPTIONS_DEFAULT= INFO SYSTEM_SCREENRC \ - NCURSES_DEFAULT MULTIUSER + NCURSES_DEFAULT OPTIONS_SINGLE= NCURSES OPTIONS_SINGLE_NCURSES= NCURSES_DEFAULT NCURSES_BASE NCURSES_PORT SYSTEM_SCREENRC_DESC= Install system screenrc with helpful status line