Very Computer

1. Problem with Solaris 7 Kernel patch 106541-15 and catopen/catgets

[[ PLEASE DON'T SEND ME EMAIL COPIES OF POSTINGS ]]

In patch 106541-15 we've fixed the security problems for
the NLSPATH problems.

Unfortunately, we cannot fix this properly and have everything still
work exactly as before.

Chowning the files to root helps some; installing them in system
directories also.  Not requiring NLSPATH to be set also helps.

I'm not quite sure I understand what you mean my:
"other applications which run under non-root user IDs can not run suid program"

I think we changed it such that suid programs can only open root-owned
catalogues.  I'd need to check.

I did the code and it's pretty fascist.

I'd need to know a bit more about what you're doing.  That way
I can either explain to you why what you're doing is a possible
security hole or whether we're perhaps too strict.

Casper
--
Expressed in this posting are my opinions.  They are in no way related
to opinions held by my employer, Sun Microsystems.
Statements on Sun products included here are not gospel and may
be fiction rather than truth.

2. Software "piracy" necessary to get PCs to sell???

3. catopen/catgets on SuSe6.4 fails

4. ptroff problem on solaris 2.5

5. Matrox Mystique ands X.

6. ProAudioStudio CD rom question

7. using find to search for Java source files and then compile then after find

8. Problems dialing in w/getty_ps over modem

9. Correct prototype for catgets()?

10. catgets and line breaks

11. It's not bad canned meat...

12. Fix for NLS catopen.

13. It's not bad canned meat...