[1170] in linux-security and linux-alert archive

home help back first fref pref prev next nref lref last post

[linux-security] Cfinger (Yet more :)

daemon@ATHENA.MIT.EDU (Roscinante)
Fri Sep 20 07:24:21 1996

Date: Thu, 19 Sep 1996 19:46:24 -0400 (EDT)
From: Roscinante <rosc@fbn.globalent.net>
To: linux-security@tarsier.cv.nrao.edu
In-Reply-To: <199609191334.JAA00470@tarsier.cv.nrao.edu>


I did it!  I castrated it! ;)
  
I hacked cfinger to no longer need root..  I just went thru and replaced
nearly every instance of 'root' with 'nobody'...  There's one routine in
main.c that attempts to renice -20 cfingerd, I changed that to 1..  I seems to
have broken the 'no root finger' but fuggit, I'm not a coder, I just mangle
other peoples' code :)  I wouldn't know how to make diffs, but I'll be glad to
put the whole src up for grabs. The src I'm using is the 1.2.3 version, I'm
going to make my changes to the 1.3.0 src, see if I can fix the no-root-finger
thingy, and then tar it all up and put it on sunsite (unless someone advises
against it ;)

I had made another change previously with cfinger, I don't think I mentioned
yet. cfinger is supposed to use its own 'userlist' program, which just happens
to want to be installed suid-root!  I changed userlist.c to use ordinary
'finger' (simple substitution here too, just change "userlist" to "finger" and
change the display string a bit to match the output header).. 

If any real coders care to help my feeble hacking, please let me know! :)

~~
 All that is gold does not glitter..                      .
 Not all those who wander are lost..J.R.R.T.        .     /\     .
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~    ._____//  \\_____.
And the knowledge that they fear                 . \\    Rush    // .
is a weapon to be held against them.. N.P.       .   \\  2112  //   .
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~    .  //   /\   \\  .
Ghost in the Machine (wraith@styx.ios.com)        I[[[[[[[[]]]]]]]]I
Roscinante (rosc@fbn.globalent.net)
http://www.globalent.net/users/fbn

home help back first fref pref prev next nref lref last post