Re: Veritas Volume Manager 3.0.x hole

[lpreid () VIDEOTRON NET (Louis-Philippe Reid)]

-> Fri, 16 Jun 2000 - Dixie Flatline ecrivait:
-> Veritas Volume Manager 3.0.x for Solaris contains a security hole which can,
-> under specific circumstances, allow local users to gain root access.
-> Workaround & Comments
-> ---------------------
->
-> The trivial workaround: add "umask 022" to /etc/rc2.d/S96vmsa-server
-> before the line that starts the Storage Administrator Server.
->

umask 022
echo "umask 022" > /etc/init.d/umask.sh
for d in /etc/rc?.d
do
    ln /etc/init.d/umask.sh $d/S00umask.sh
done

for a system-wide protection...

---
 _/_/_/   Louis-Philippe Reid -- Administrateur de systemes Unix
 _/_/   Ingenierie Telephonie IP - Videotron Communications Inc.
 _/   tel: 514-380-7336 -- 2000 Berri, Montreal, QC, CA, H2L 4V7