Gentoo Archives: gentoo-security

From: Alex Efros <powerman@×××××××.ua>
To: gentoo-security@l.g.o
Subject: Re: [gentoo-security] SUID progs
Date: Tue, 10 Aug 2004 02:15:49
Message-Id: 20040810021514.GB15637@home.power
In Reply to: Re: [gentoo-security] SUID progs by Mike Frysinger
1 Hi!
2
3 On Mon, Aug 09, 2004 at 10:01:42PM -0400, Mike Frysinger wrote:
4 > > -rwsr-x--- 1 root cron 632 æÅ× 13 05:52 /etc/init.d/dcron
5 >
6 > remove it and re-install dcron, this was fixed a while ago iirc
7
8 You right, thanks.
9
10 > > -rws--x--x 2 root root 1089220 æÅ× 12 18:34 /usr/bin/sperl5.8.2
11 > > -rws--x--x 2 root root 1089220 æÅ× 12 18:34 /usr/bin/suidperl
12 >
13 > perl is actively working on removing this ... also, you're running an old
14 > perl, why dont you update it and check it again
15
16 perl stop installing suidperl by default many versions ago. But in all
17 perl-*.ebuild (including latest) suidperl forced to install by adding
18 '-Dd_dosuid' option to Configure. I think it should be disabled by default
19 and enabled using special USE flag OR after compiling&installing suidperl
20 if should be `chmod -s` -- anyone who want it can just `chmod +s` and use
21 (this save us from introducing one more USE flag).
22
23 > > -rwsr-xr-x 1 root root 6108 éÀÌ 24 08:52
24 > > /usr/kde/3.2/bin/kpac_dhcp_helper
25 >
26 > file a bug with kde if you care to persue this one
27 >
28 > > -rwsr-xr-x 1 root root 6128 æÅ× 12 17:32
29 > > /usr/lib/misc/pt_chown
30 >
31 > mmm you could file a bug with baselayout ... at boot time, if devpts never
32 > gets mounted, chmod this file +s ?
33 >
34 > > -r-sr-xr-x 1 root root 261600 æÅ× 13 15:12 /usr/sbin/pppd
35 >
36 > file a bug with the net-dialup people and have them investigate
37
38 I will wait for other possible replies here first - gentoo bugzilla is a little
39 overloaded now to add three more bugs which probably isn't a bugs...
40
41 --
42 WBR, Alex.
43
44 --
45 gentoo-security@g.o mailing list

Replies

Subject Author
Re: [gentoo-security] SUID progs Mike Frysinger <vapier@g.o>