mailing list archives
Delegate creates directories writable for anyone
From: rhialto () POLDER UBC KUN NL (Olaf Seibert)
Date: Wed, 21 Jul 1999 14:00:34 +0200
On 30 june, I wrote (approximately) the following email to the author of
Delegate, a multi-protocol proxy deamon (ftp, http, telnet, etc). So far
I have received no reply, so now I'm posting here.
The Delegate home page is at http://wall.etl.go.jp/delegate/ .
Hello Yutaka Sato,
I am starting to use your delegate proxy on NetBSD. I noticed that it
creates lots of files and directories in the DGROOT directory that are
writable for everybody. This is my configuration:
Delegate is started from inetd.conf:
ftp stream tcp wait delegate /usr/local/bin/delegated
Output of ls -alR /tmp/delegate:
drwxrwxrwx 7 delegate wheel 512 Jun 30 16:01 .
drwxrwxrwt 4 root wheel 512 Jun 30 16:07 ..
drwxrwxrwx 5 delegate wheel 512 Jun 30 16:01 act
drwxrwxrwx 3 delegate wheel 512 Jun 30 16:01 etc
drwxrwxrwx 3 delegate wheel 512 Jun 30 16:01 log
drwxr-xr-x 3 delegate wheel 512 Jun 30 16:06 tmp
drwxrwxrwx 2 delegate wheel 512 Jun 30 16:06 work
drwxrwxrwx 2 delegate wheel 512 Jun 30 16:01 .
drwxrwxrwx 4 delegate wheel 512 Jun 30 16:01 ..
-rw-rw-rw- 1 delegate wheel 50 Jun 30 16:01 09
-rw-rw-rw- 1 delegate wheel 49 Jun 30 16:01 12
This is of course not good from a security viewpoint. Can you please fix
Another thing: If I start delegate as root, and it changes to another
user, some of these directories are made as root, and later delegate
claims it cannot create some other files.
Thank you in advance.
___ Olaf 'Rhialto' Seibert - ___ Olaf 'Rhialto' Seibert - rhialto () polder ubc ---- Unauthorized duplication,
\X/ .kun.nl ---- while sometimes necessary, is never as good as the real thing.
- Re: Shared memory DoS's, (continued)