Search String: Display: Description: Sort:

Results:

References: [ +subject:/^(?:^\s*(re|sv|fwd|fw)[\[\]\d]*[:>-]+\s*)*Insecure\s+world\s+writable\s+files\s+from\s+XFS\s+1\.0\.1\s+ISO\s+installer\s*$/: 44 ]

Total 44 documents matching your query.

1. Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Simon Matter <simon.matter@xxxxxxxxxxxxxxxx>
Date: Thu, 02 Aug 2001 14:44:57 +0200
from mobile.sauter-bc.com (unknown [10.1.6.21]) by basel1.sauter-bc.com (Postfix) with ESMTP id 5FDB357306 for <linux-xfs@oss.sgi.com>; Thu, 2 Aug 2001 14:44:57 +0200 (CEST) Organization: Sauter AG,
/archives/xfs/2001-08/msg00032.html (8,932 bytes)

2. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Eric Sandeen <sandeen@xxxxxxx>
Date: Thu, 02 Aug 2001 08:49:36 -0500
Which files, for example? So this does NOT happen with either stock Red Hat or XFS 1.0? Not sure what might be causing this... -Eric -- Eric Sandeen XFS for Linux http://oss.sgi.com/projects/xfs sand
/archives/xfs/2001-08/msg00033.html (9,036 bytes)

3. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Keith Owens <kaos@xxxxxxxxxxxxxxxxx>
Date: Fri, 03 Aug 2001 00:16:27 +1000
Almost certainly the kernel bug introduced somewhere around 2.4.3 and fixed in 2.4.7. The default umask for kernel threads, including init was incorrectly set to 000. Stock RedHat init scripts have u
/archives/xfs/2001-08/msg00034.html (9,593 bytes)

4. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Simon Matter <simon.matter@xxxxxxxxxxxxxxxx>
Date: Thu, 02 Aug 2001 16:17:47 +0200
from mobile.sauter-bc.com (unknown [10.1.6.21]) by basel1.sauter-bc.com (Postfix) with ESMTP id D647757306; Thu, 2 Aug 2001 16:17:47 +0200 (CEST) Cc: linux-xfs <linux-xfs@xxxxxxxxxxx> Organization:
/archives/xfs/2001-08/msg00035.html (14,807 bytes)

5. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Simon Matter <simon.matter@xxxxxxxxxxxxxxxx>
Date: Thu, 02 Aug 2001 16:39:50 +0200
from mobile.sauter-bc.com (unknown [10.1.6.21]) by basel1.sauter-bc.com (Postfix) with ESMTP id 3961157306; Thu, 2 Aug 2001 16:39:51 +0200 (CEST) Cc: Eric Sandeen <sandeen@xxxxxxx>, linux-xfs <linux
/archives/xfs/2001-08/msg00036.html (10,420 bytes)

6. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Steve Lord <lord@xxxxxxx>
Date: Thu, 02 Aug 2001 09:59:48 -0500
The interesting thing is that the initscripts should stay the same, so I would suspect something running in the kernel at install time is at fault. The 1.0.1 install package does not have a redhat e
/archives/xfs/2001-08/msg00037.html (11,350 bytes)

7. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Eric Sandeen <sandeen@xxxxxxx>
Date: 02 Aug 2001 10:12:25 -0500
Ah, hindsight is great, isn't it? :( The Red Hat 2.4.3 + XFS kernel is running at install time, so I guess that's where this problem comes from. Hm, might be time to come up with a script to fix this
/archives/xfs/2001-08/msg00039.html (10,857 bytes)

8. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Nathan Straz <nstraz@xxxxxxx>
Date: Thu, 2 Aug 2001 10:14:29 -0500
You list of files indicates that the house is probably still locked, but once you're in the house, some of the rooms that should be locked, aren't. That doesn't make it any less of an unpleasant surp
/archives/xfs/2001-08/msg00040.html (10,967 bytes)

9. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Simon Matter <simon.matter@xxxxxxxxxxxxxxxx>
Date: Thu, 02 Aug 2001 17:31:10 +0200
from mobile.sauter-bc.com (unknown [10.1.6.21]) by basel1.sauter-bc.com (Postfix) with ESMTP id E077F57306; Thu, 2 Aug 2001 17:31:10 +0200 (CEST) Cc: Steve Lord <lord@xxxxxxx>, Keith Owens <kaos@xxx
/archives/xfs/2001-08/msg00041.html (12,206 bytes)

10. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: "Martin K. Petersen" <mkp@xxxxxxx>
Date: 02 Aug 2001 11:42:02 -0400
The Alpha installer uses the RedHat Alpha 2.4.3 RPM + XFS patches but doesn't suffer from the problem. Do you have the anaconda-7.1-umask patch in the IA32 installer? -- Martin K. Petersen Cereal Bo
/archives/xfs/2001-08/msg00042.html (11,559 bytes)

11. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Eric Sandeen <sandeen@xxxxxxx>
Date: 02 Aug 2001 11:01:15 -0500
Hm, where might one find this patch? Also, FWIW, this isn't an xfs-specific problem, I just did an ext2 install with the 1.0.1 CD, and it's still there. So I guess it is the kernel bug previously men
/archives/xfs/2001-08/msg00043.html (11,251 bytes)

12. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: "Martin K. Petersen" <mkp@xxxxxxx>
Date: 02 Aug 2001 12:08:24 -0400
In your mail. In general the bits in the Alpha packages are slightly more recent than in the IA32 versions. -- Martin K. Petersen Cereal Bowl Engineer, Linuxcare, Inc. http://mkp.net/ SGI XFS, Linux
/archives/xfs/2001-08/msg00044.html (11,785 bytes)

13. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Dean Brissinger <brissing@xxxxxxxxxx>
Date: Thu, 2 Aug 2001 10:29:20 -0600
Which files, for example? So this does NOT happen with either stock Red Hat or XFS 1.0? Not sure what might be causing this... Sorry for not providing more information. It does NOT happen with XFS 1.
/archives/xfs/2001-08/msg00045.html (12,533 bytes)

14. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Dean Brissinger <brissing@xxxxxxxxxx>
Date: Thu, 2 Aug 2001 10:32:20 -0600
installer, too, I suppose. If you're doing so, could you please include my modified RPM's: My previous mail: http://oss.sgi.com/projects/xfs/mail_archive/0107/msg01211.html RPM's: http://home.datacom
/archives/xfs/2001-08/msg00046.html (11,268 bytes)

15. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Simon Matter <Simon.Matter@xxxxxxxxxxxxxxxx>
Date: Thu, 02 Aug 2001 19:10:50 +0200
from mobile.sauter-bc.com (unknown [10.1.6.21]) by basel1.sauter-bc.com (Postfix) with ESMTP id AA77657306; Thu, 2 Aug 2001 19:10:20 +0200 (CEST) Cc: linux-xfs <linux-xfs@xxxxxxxxxxx> References: <3
/archives/xfs/2001-08/msg00047.html (13,598 bytes)

16. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Simon Matter <Simon.Matter@xxxxxxxxxxxxxxxx>
Date: Thu, 02 Aug 2001 19:13:25 +0200
from mobile.sauter-bc.com (unknown [10.1.6.21]) by basel1.sauter-bc.com (Postfix) with ESMTP id 2145357306; Thu, 2 Aug 2001 19:12:54 +0200 (CEST) Cc: linux-xfs <linux-xfs@xxxxxxxxxxx> References: <2
/archives/xfs/2001-08/msg00049.html (11,920 bytes)

17. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Dean Brissinger <brissing@xxxxxxxxxx>
Date: Thu, 2 Aug 2001 11:29:45 -0600
At 7:10 PM +0200 8/2/01, Simon Matter wrote: Unfortunately the problem applies to all directories, but for example in /usr there are just a few files with wrong permissions because usually the proble
/archives/xfs/2001-08/msg00051.html (11,426 bytes)

18. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Steve Lord <lord@xxxxxxx>
Date: Thu, 02 Aug 2001 12:30:46 -0500
We are working on a list of the effected files, and extracting the correct permissions, the end result will hopefully be a fixup script. Steve
/archives/xfs/2001-08/msg00052.html (9,919 bytes)

19. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Nathan Straz <nstraz@xxxxxxx>
Date: Thu, 2 Aug 2001 12:36:55 -0500
Does an `rpm --setperms -a` fix most of the wrong permissions? -- Nate Straz nstraz@xxxxxxx sgi, inc http://www.sgi.com/ Linux Test Project http://ltp.sf.net/
/archives/xfs/2001-08/msg00054.html (10,550 bytes)

20. Re: Insecure world writable files from XFS 1.0.1 ISO installer (score: 1)
Author: Steve Lord <lord@xxxxxxx>
Date: Thu, 02 Aug 2001 13:01:47 -0500
Hmm, probably not, since the files being discussed are not directly installed from rpms, but are created by the install process. Steve
/archives/xfs/2001-08/msg00057.html (9,980 bytes)


This search system is powered by Namazu