Patch against a bug which is a local root vulnerability on other platforms,

but which I could not repeat on FreeBSD.  It may still be a problem, but
it looks like screen was already dropping privilege before the operation
in question.

Submitted by:	Roman Drahtmueller <draht@suse.de>
This commit is contained in:
Kris Kennaway 2001-09-04 19:20:42 +00:00
parent 3ef1afa8d7
commit d9b67c242d
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=47431
4 changed files with 28 additions and 0 deletions

View file

@ -7,6 +7,7 @@
PORTNAME= screen PORTNAME= screen
PORTVERSION= 3.9.9 PORTVERSION= 3.9.9
PORTREVISION= 1
CATEGORIES= misc CATEGORIES= misc
MASTER_SITES= ftp://ftp.uni-erlangen.de/pub/utilities/screen/ \ MASTER_SITES= ftp://ftp.uni-erlangen.de/pub/utilities/screen/ \
${MASTER_SITE_GNU} ${MASTER_SITE_GNU}

View file

@ -0,0 +1,13 @@
--- screen.c.orig Fri May 25 16:40:10 2001
+++ screen.c Mon Sep 3 15:48:24 2001
@@ -1061,6 +1061,10 @@
Attacher();
/* NOTREACHED */
}
+#ifdef MULTIUSER
+ if (multiattach)
+ Panic(0, "Can't create sessions of other users.");
+#endif
debug("screen -r: backend not responding -- still crying\n");
}
else if (dflag && !mflag)

View file

@ -7,6 +7,7 @@
PORTNAME= screen PORTNAME= screen
PORTVERSION= 3.9.9 PORTVERSION= 3.9.9
PORTREVISION= 1
CATEGORIES= misc CATEGORIES= misc
MASTER_SITES= ftp://ftp.uni-erlangen.de/pub/utilities/screen/ \ MASTER_SITES= ftp://ftp.uni-erlangen.de/pub/utilities/screen/ \
${MASTER_SITE_GNU} ${MASTER_SITE_GNU}

View file

@ -0,0 +1,13 @@
--- screen.c.orig Fri May 25 16:40:10 2001
+++ screen.c Mon Sep 3 15:48:24 2001
@@ -1061,6 +1061,10 @@
Attacher();
/* NOTREACHED */
}
+#ifdef MULTIUSER
+ if (multiattach)
+ Panic(0, "Can't create sessions of other users.");
+#endif
debug("screen -r: backend not responding -- still crying\n");
}
else if (dflag && !mflag)