OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1994: Re: /dev/{km,m}em worries

Re: /dev/{km,m}em worries

Bill Bogstad (bogstadblaze.cs.jhu.edu)
Tue, 17 May 1994 17:28:48 -0400 

>Also, be aware that /etc/crash is setgid kmem and allows you to fork
>a shell and DOES NOT reset the group id for that shell.  So even if
>your /dev/kmem is set properly to mode 640, if users can run /etc/crash,
>they can still do this.
>
>My solution was simply chmod 700 /etc/crash on all my systems.   Root
>is the only one that needs it anyway....

	Sun patch 100103-XX is a shell script which when run fixes this and
other similar permissions problems on various files and directories.  The
current version (ftpable from Sun) is 100103-12.  You might want to check
what this script does before you run it, but it probably provides a good
pointer at things you should examine.  For example, we have decided locally
to make the /dev/*fd* world readable/writable.

				Bill Bogstad