Subject: Re: [secure@FREEBSD.LUBLIN.PL: FreeBSD (and other BSDs?) local root explot]
To: None <tech-security@netbsd.org>
From: John Kohl <jtk@kolvir.arlington.ma.us>
List: tech-security
Date: 08/27/1999 11:37:23
  by redmail.netbsd.org with SMTP; 27 Aug 1999 15:37:29 -0000
	by kolvir.arlington.ma.us (8.8.8/JTK19980409) id LAA17505;
	Fri, 27 Aug 1999 11:37:23 -0400 (EDT)
Date: Fri, 27 Aug 1999 11:37:23 -0400 (EDT)
Message-Id: <199908271537.LAA17505@kolvir.arlington.ma.us>
From: John Kohl <jtk@kolvir.arlington.ma.us>
To: tech-security@netbsd.org
In-reply-to: <199908271457.OAA19930@orchard.arlington.ma.us> (message from
	Bill Sommerfeld on Fri, 27 Aug 1999 10:57:54 -0400)
Subject: Re: [secure@FREEBSD.LUBLIN.PL: FreeBSD (and other BSDs?) local root explot]

>>>>> "Bill" == Bill Sommerfeld <sommerfeld@orchard.arlington.ma.us> writes:

Bill> IMHO what the folks creating symlinks to not send their coredumps into
Bill> NFS "really" want is a per-process inherited attribute which i'll call
Bill> the "core filename format".

Yeah, I'd like to force them somewhere else on occasion.  Alas, putting
them into a directory other than u.u_cdir is probably asking for
trouble.  I'd say that setuid programs should dump the attribute and get
the default.

e.g. "/var/tmp/jtk-cores/%n.core" or "/etc/master.passwd"

-- 
==John Kohl <jtk@kolvir.arlington.ma.us>, <john_kohl@alum.mit.edu>
Home page: <http://people.ne.mediaone.net/jtk/>
Bicycling and Skiing to keep fit.