[16967] in Athena Bugs
Re: sun4 8.2.19: ufsrestore
daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri Jul 23 13:46:44 1999
Message-Id: <199907231746.NAA00690@rcn-sucks.fsck.com>
To: "Karen E. Walrath" <karen@MIT.EDU>
cc: bugs@MIT.EDU, phils@MIT.EDU
In-reply-to: Your message of "Fri, 23 Jul 1999 12:50:35 EDT."
<199907231650.MAA12839@pelli.mit.edu>
Date: Fri, 23 Jul 1999 13:46:30 EDT
From: Greg Hudson <ghudson@MIT.EDU>
In 8.2.16, we turned off the setuid bit on a program related to
ufsrestore. At the time, there was a report of a security hole which
had not been fixed by Sun yet. I don't know why the program would
need to be setuid if you're doing the restore as root, but please see
if the following command makes the program go away:
chmod u+s /usr/lib/fs/ufs/ufsrestore
If it does make the problem go away, let us know and we'll see if we
can fix the problem in the release. If it doesn't make the problem go
away, we'll look into it further.
