[2333] in bugtraq
Larry Doolittle: telnetd, of course
daemon@ATHENA.MIT.EDU (Sam Hartman)
Thu Nov 2 19:40:22 1995
Date: Wed, 1 Nov 1995 19:34:05 EST
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Sam Hartman <hartmans@MIT.EDU>
X-To: bugtraq@CRIMELAB.COM
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
------- Forwarded Message
Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po9.MIT.EDU (5.61/4.7) id AA23251; Wed, 1 Nov 95 19:31:31 EST
Received: from recycle.cebaf.gov by MIT.EDU with SMTP
id AA21524; Wed, 1 Nov 95 19:31:09 EST
Received: by recycle.cebaf.gov.cebaf.gov (Linux Smail3.1.28.1 #14)
id m0tAnUW-000ASpC; Wed, 1 Nov 95 19:26 EST
Message-Id: <m0tAnUW-000ASpC@recycle.cebaf.gov>
From: doolitt@recycle.cebaf.gov (Larry Doolittle)
Subject: telnetd, of course
To: hartmans@MIT.EDU
Date: Wed, 1 Nov 1995 19:26:47 -0500 (EST)
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Content-Length: 664
Testing my Linux system, I ran into a few things
I thought you should know.
Recent Linux kernels do not allow access to environment
strings via ps, except for the user him/herself.
That is, /proc/*/environ is protected 400. This
could confuse people reading your instructions,
since they would see environments for their own
process but not root's. To verify environment
strings of login, you need to run ps as root.
It took me a while to reproduce the problem on my
machine, since I didn't look closely enough at
the output of ldd, and I made /etc/libc.so instead
of /etc/libc.so.4 .
Onward to fix my telnetd 8-) .
- Larry Doolittle ldoolitt@cebaf.gov
------- End of Forwarded Message
