BugTraq
Re: cpio TOCTOU file-permissions vulnerability Apr 19 2005 12:34PM
Steve G (linux_4ever yahoo com)
Hello,

Since no fix has been posted, I've taken a stab at patching this. I think this
patch solves all issues with chmod & chown. I would recommend people review this
patch and apply since cpio can create suid files, devices, and directories with
special permissions. I have a patch for coreutils mostly done and will post that
soon.

-Steve Grubb

__________________________________
Do you Yahoo!?
Make Yahoo! your home page
http://www.yahoo.com/r/hs

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus