lkml.org 
[lkml]   [1997]   [Feb]   [10]   [last100]   RSS Feed
Views: [more markup]  [less markup]  [headers]  [forward] 
 
Messages in this thread
/
DateSat, 8 Feb 1997 02:21:48 -0600 (CST)
FromSolitude <>
SubjectRe: [masq] 1st virus in Linux :( (fwd)
On Fri, 7 Feb 1997, Neil Moore wrote:

> > On Fri, 7 Feb 1997 tyson@rwii.com wrote: 
> > I don't agree. Doom has a known bug which allows any user on your system
> > to get root if doom is installed setuid root. Every Linux distribution
> > I've ever used installs Doom setuid root, and RedHat  has only recently
> > released a patch to correct this. (The patch doesn't fix doom, just
> > removes the setuid bit.)
> 
> Why not just delete it?

Doom is actually one of two programs:  xdoom or sdoom.  I think there is
also a framebuffer version of xdoom.  (That's the case in quake)  sdoom
uses svgalib and requires that suid root is set.  xdoom works w/o suid.
svgalib sucks anyway...

- John
<solitude@johnf.reshall.ksu.edu>
<jsf8471@ksu.edu>

        _/_/_/_/_/  _/_/_/    _/    _/  _/      _/
           _/     _/     _/  _/    _/  _/_/    _/
          _/     _/     _/  _/_/_/_/  _/  _/  _/
    _/   _/     _/     _/  _/    _/  _/    _/_/
     _/_/        _/_/_/   _/    _/  _/      _/

NO SOLICITING!
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3ia
mQCNAzJxGjQAAAEEALY2PAb11+HHumeMg4df/TL1uefyzBdNpA2baVuVyTRBQF/F
zpOJ5ZoOPjmysnMKR1JVN7t8fjdNXg/qRSMwtov8qucgUogaAfTzkBhj4YHdK737
u0glZ3oRpdFFuXgmAvXTldvdNiRBgH0X2WgQI26kpCIAMH3gq771h9lR9fNBAAUR
tD1Kb2huIEZyZWFyIDxzb2xpdHVkZUBqb2huZi5yZXNoYWxsLmtzdS5lZHU+IDxq
c2Y4NDcxQGtzdS5lZHU+iQCVAwUQMnEaNL71h9lR9fNBAQH5VwQAlby25sl4b9sy
enDu3d4uFj4poh3olePx3zzGaKh1pI5O5fSvosN48sx7q3c6sxK8IBkTKHju9DTj
6ev0d8f0R4REe5MHaoKGvezbK9/1E7T7+kTWsOSOsona7ps/Iii1Qw5naWAgBPCq
HfABpvnMe7MSqbndJnfO4hk5D+LVKlQ=
=3LXH
-----END PGP PUBLIC KEY BLOCK-----

\
 
 \ /
  Last update: 2005-03-22 13:38    [from the cache]
©2003-2008