Re: shellutils grave bug
On Wed, Jun 02, 1999 at 03:03:14PM +0100, Julian Gilbey wrote:
> I wrote:
> > Four or five bug reports have just been submitted because the i386
> > port of shellutils (just uploaded by the autobuilder, I would guess --
> > haven't checked) has a non-setuid-root su. So I tried recompiling the
> > slink version -- and I has the *same* problem.
> >
> > I plan to investigate and to do an NMU very soon, once I'm able to
> > find the real problem. If I can't, I'll just stick an appropriate
> > line in debian/rules for the time being.
>
> Found the problem: the slink version of debhelper didn't strip the
> setuid bit from executables, the current potato version does. Fix:
> dh_fixperms -Xbin/su
>
> NMU is currently in progress.
That or use dh_suidregister.
That is what I did in my own local copy of shellutils (way back when glibc2.1
first came out w/ utmpd, and who and w didn't work)
Reply to: