Bugtraq: Re: load.root (loadmodule hole)

[casper () Holland Sun COM (Casper Dik)]

> turning of the suid bit works *mostly*
>
> of course don't expect to be able to run openwindows :-)

This is not entirely true.

The set-uid "loadmodule" program is called by openwin *only* if
you start it with the -nosunview option.

If you don't call it with the -nosunview option, you should
be ok w/o loadmodule, provided you install the sunview stuff
on your system.

Alternatively, you can load the modules from /etc/rc.local
at system boot time.

Casper