mailing list archives
Re: IRIX: Bug in startmidi
From: nafees () STONO CS COFC EDU (Nafees Bin Zafar)
Date: Sun, 9 Feb 1997 15:49:49 -0500
On Sun, 9 Feb 1997, David Hedley wrote:
Whilst browsing around the filesystem on my SGI (running IRIX 5.3), I
noticed a little suid-root program called 'startmidi' which hides in
/usr/sbin. When run, this program creates various files in /tmp. You
guessed it, it respects umask and follows symlinks. Comme ca:
[ ...deletia... ]
I was not able to reproduce this phenomenon in irix 6.2 or irix 6.3.
'startmidi' creates a file in /tmp called "midififo", however if a file,
or symlink, exists there already, it simply erases it. The newly
created "midififo" is owned by root, and only root has any kind of
permissions on it. It does not follow sym links.
------Nafees Bin Zafar
<binzafn () musc edu>
<nafees () cs cofc edu>
"I think, therefore I think"
- Re: [linux-security] Re: Linux virus, (continued)