[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: shellutils grave bug

On Wed, Jun 02, 1999 at 03:03:14PM +0100, Julian Gilbey wrote:
> I wrote:
> > Four or five bug reports have just been submitted because the i386
> > port of shellutils (just uploaded by the autobuilder, I would guess --
> > haven't checked) has a non-setuid-root su.  So I tried recompiling the
> > slink version -- and I has the *same* problem.
> > 
> > I plan to investigate and to do an NMU very soon, once I'm able to
> > find the real problem.  If I can't, I'll just stick an appropriate
> > line in debian/rules for the time being.
> Found the problem: the slink version of debhelper didn't strip the
> setuid bit from executables, the current potato version does.  Fix:
>   dh_fixperms -Xbin/su
> NMU is currently in progress.
That or use dh_suidregister.

That is what I did in my own local copy of shellutils (way back when glibc2.1
first came out w/ utmpd, and who and w didn't work)

Reply to: