Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/etc Use cat -f to avoid denial of service attacks by people ...



details:   https://anonhg.NetBSD.org/src/rev/7711598b2dbe
branches:  trunk
changeset: 480540:7711598b2dbe
user:      christos <christos%NetBSD.org@localhost>
date:      Sat Jan 15 01:15:12 2000 +0000

description:
Use cat -f to avoid denial of service attacks by people who make .rhosts
files fifos.

diffstat:

 etc/security |  4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diffs (20 lines):

diff -r d0762d26354b -r 7711598b2dbe etc/security
--- a/etc/security      Sat Jan 15 01:13:15 2000 +0000
+++ b/etc/security      Sat Jan 15 01:15:12 2000 +0000
@@ -1,6 +1,6 @@
 #!/bin/sh -
 #
-#      $NetBSD: security,v 1.40 1999/09/05 15:11:42 perry Exp $
+#      $NetBSD: security,v 1.41 2000/01/15 01:15:12 christos Exp $
 #      from: @(#)security      8.1 (Berkeley) 6/9/93
 #
 
@@ -328,7 +328,7 @@
 
        while read uid homedir; do
                if [ -f ${homedir}/.rhosts -a -r ${homedir}/.rhosts ] && \
-                   egrep '\+' ${homedir}/.rhosts > /dev/null ; then
+                   cat -f ${homedir}/.rhosts | egrep '\+' > /dev/null ; then
                        printf "$uid: + in .rhosts file.\n"
                fi
        done < $MPBYPATH > $OUTPUT



Home | Main Index | Thread Index | Old Index