[2713] in Kerberos-V5-bugs
Re: pending/407: bug in rcache/rc_io.c
daemon@ATHENA.MIT.EDU (Theodore Y. Ts'o)
Mon Mar 31 19:29:09 1997
Date: Mon, 31 Mar 1997 19:24:38 -0500
From: "Theodore Y. Ts'o" <tytso@MIT.EDU>
To: krb5-bugs@MIT.EDU, Patrick Powell <papowell@dickory.sdsu.edu>
Cc: gnats-admin@RT-11.MIT.EDU, krb5-prs@RT-11.MIT.EDU
In-Reply-To: Patrick Powell's message of Fri, 28 Mar 1997 19:09:01 -0500,
<199703290009.TAA11526@rt-11.MIT.EDU>
Date: Fri, 28 Mar 1997 16:06:59 -0800 (PST)
From: Patrick Powell <papowell@dickory.sdsu.edu>
Problem: /kerberos/krb5-1.0/src/lib/krb5/rcache/rc_io.c
- this routine is used to check that a cache file has been created
and has the right ownerships. The problem is that it does not
work correctly with SUID programs, and it does not check to see
that the file is really owned by the right person.
A patch to solve this problem has already been checked into our tree,
and it will be fixed in the patchlevel 1 release.
- Ted
