Messages in this thread |  | | Date | Sat, 8 Feb 1997 02:21:48 -0600 (CST) | From | Solitude <> | Subject | Re: [masq] 1st virus in Linux :( (fwd) |
| |
On Fri, 7 Feb 1997, Neil Moore wrote:
> > On Fri, 7 Feb 1997 tyson@rwii.com wrote: > > I don't agree. Doom has a known bug which allows any user on your system > > to get root if doom is installed setuid root. Every Linux distribution > > I've ever used installs Doom setuid root, and RedHat has only recently > > released a patch to correct this. (The patch doesn't fix doom, just > > removes the setuid bit.) > > Why not just delete it?
Doom is actually one of two programs: xdoom or sdoom. I think there is also a framebuffer version of xdoom. (That's the case in quake) sdoom uses svgalib and requires that suid root is set. xdoom works w/o suid. svgalib sucks anyway...
- John <solitude@johnf.reshall.ksu.edu> <jsf8471@ksu.edu>
_/_/_/_/_/ _/_/_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/_/ _/ _/ _/ _/ _/_/_/_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/_/ _/_/ _/_/_/ _/ _/ _/ _/
NO SOLICITING! -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6.3ia
mQCNAzJxGjQAAAEEALY2PAb11+HHumeMg4df/TL1uefyzBdNpA2baVuVyTRBQF/F zpOJ5ZoOPjmysnMKR1JVN7t8fjdNXg/qRSMwtov8qucgUogaAfTzkBhj4YHdK737 u0glZ3oRpdFFuXgmAvXTldvdNiRBgH0X2WgQI26kpCIAMH3gq771h9lR9fNBAAUR tD1Kb2huIEZyZWFyIDxzb2xpdHVkZUBqb2huZi5yZXNoYWxsLmtzdS5lZHU+IDxq c2Y4NDcxQGtzdS5lZHU+iQCVAwUQMnEaNL71h9lR9fNBAQH5VwQAlby25sl4b9sy enDu3d4uFj4poh3olePx3zzGaKh1pI5O5fSvosN48sx7q3c6sxK8IBkTKHju9DTj 6ev0d8f0R4REe5MHaoKGvezbK9/1E7T7+kTWsOSOsona7ps/Iii1Qw5naWAgBPCq HfABpvnMe7MSqbndJnfO4hk5D+LVKlQ= =3LXH -----END PGP PUBLIC KEY BLOCK-----
|  |