diff options
| author | Jim Mock <jim@FreeBSD.org> | 2000-07-13 20:33:25 +0000 |
|---|---|---|
| committer | Jim Mock <jim@FreeBSD.org> | 2000-07-13 20:33:25 +0000 |
| commit | 40c4d3d7f09c144c4eed90554a7d48ec5707dc86 (patch) | |
| tree | ccdde8fe6cbe0cfc4487ad0486efbfca1a593530 /games/xtrojka | |
| parent | 262ee4f94f7cabc023da3af50f062f8db223dfc6 (diff) | |
| download | ports-40c4d3d7f09c144c4eed90554a7d48ec5707dc86.tar.gz ports-40c4d3d7f09c144c4eed90554a7d48ec5707dc86.zip | |
Fix exploit where a local user can overwrite arbitrary files.
PR: 19862
19864
19862 submitted by: Rich Mirch <mirchr@sunyit.edu>
19864 submitted by: maintainer
Notes
Notes:
svn path=/head/; revision=30586
Diffstat (limited to 'games/xtrojka')
| -rw-r--r-- | games/xtrojka/files/patch-aa | 12 |
1 files changed, 7 insertions, 5 deletions
diff --git a/games/xtrojka/files/patch-aa b/games/xtrojka/files/patch-aa index 59a5b83c2c3a..c84978d819c1 100644 --- a/games/xtrojka/files/patch-aa +++ b/games/xtrojka/files/patch-aa @@ -1,5 +1,5 @@ ---- Makefile Sat Oct 21 17:38:22 1995 -+++ Makefile.new Mon May 29 01:35:31 2000 +--- Makefile.orig Sat Oct 21 22:38:22 1995 ++++ Makefile Wed Jul 12 08:50:34 2000 @@ -8,7 +8,7 @@ # your favorite C-compiler @@ -58,7 +58,7 @@ # # # main -@@ -101,11 +105,15 @@ +@@ -101,11 +105,17 @@ # # install: @@ -67,8 +67,9 @@ - cp xtrojka.6 $(MANDIR); chmod go+r xtrojka.6; \ - cp xtrojka $(TARGET_DIR);chmod go+rx xtrojka; \ - touch $(HSFILE); chmod go+rwx $(HSFILE); -+ echo $(HSFILE)|sed -e 's/\//\\\//g'>/tmp/hsn -+ sed -e "s/__SCOREDIR__/`cat /tmp/hsn`/g" manpage > xtrojka.6 ++ @rm -f hsn ++ echo $(HSFILE)|sed -e 's/\//\\\//g'>hsn ++ sed -e "s/__SCOREDIR__/`cat hsn`/g" manpage > xtrojka.6 + gzip -c xtrojka.6 >$(MANDIR)/xtrojka.6.gz + cp xtrojka $(TARGET_DIR) + chmod 2755 $(TARGET_DIR)/xtrojka @@ -76,6 +77,7 @@ + touch $(HSFILE) + chmod 664 $(HSFILE) + chgrp games $(HSFILE) ++ @rm -f hsn clean: rm -rf *.o core xtrojka xtrojka.6 |