OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: BSD chpass (fwd)
From: Dag-Erling Smorgrav (desofug.org)
Date: Thu Oct 05 2000 - 08:30:00 CDT

Alex Prohorenko <whitealkar.net> writes:
> Dima Dorfman <dimaunixfreak.org> wrote:
> > Unfortunatly it isn't that easy if you're running with securelevel > 0
> > since chpass is installed with the schg (system immutable) flag on by
> > default. Oh well, guess it's time to reboot some hosts. :-/
> I do not see any single problem here.
>
> chflags noschg /usr/bin/chpass
> chown u-s /usr/bin/chpass
>
> Sounds pretty easy, isn't it?

Except that chflags doesn't work at higher securelevels.

DES 

-- 
Dag-Erling Smorgrav - desofug.org

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message