The debian-private mailing list leak, part 1. Volunteers have complained about Blackmail. Lynchings. Character assassination. Defamation. Cyberbullying. Volunteers who gave many years of their lives are picked out at random for cruel social experiments. The former DPL's girlfriend Molly de Blanc is given volunteers to experiment on for her crazy talks. These volunteers never consented to be used like lab rats. We don't either. debian-private can no longer be a safe space for the cabal. Let these monsters have nowhere to hide. Volunteers are not disposable. We stand with the victims.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Small bug in screen-3.7.1 (fwd)

Could someone test this? I believe 3.7.1 is the latest version of screen,
right?

  Christian

---------- Forwarded message ----------
Date: Mon, 15 Sep 1997 12:11:19 -0600
From: gershwin <gershwin@ORCI.COM>
To: BUGTRAQ@NETSPACE.ORG
Subject: Small bug in screen-3.7.1

Sorry if this is old news, but I have not seen anything about it.
I have noticed a small bug in screen-3.7.1 when it is run un suid
When a system is rebooted the /tmp/screens directory is removed, the first
time screen is run it makes /tmp/screens owned by the user that envoked it,
*with that users umask*

bullwinkle: {1115} % ls -al /tmp
drwx------   3 gershwin  wheel       512 Sep 15 12:00 screens

The next time a user tries to run screen they will get a error message

bullwinkle: {1119} % screen
Directory '/tmp/screens' must have mode 777.

I can change /tmp/screens to 777 and other users can use it normaly.

but with a system user other than root owning the /tmp/screens directory
he/she could remove other users screens, nothing major but just annoying.

This has been tested on bsdi 2.0-3.0 and Linux

Logan Gabriel -- gershwin@orci.com
If NT's the answer, you dont understand the question.


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-private-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .