userOsa can overwrite passwd and shadow
What is this stuff?
If this isn't exactly what you wanted, please try our Search (there's a LOT of techy and non-techy stuff here about Linux, Unix, Mac OS X and just computers in general!):
Newsgroups: comp.unix.sco.misc Subject: Re: BUGTRAQ report References: <firstname.lastname@example.org> From: email@example.com (John Temples) Message-ID: <zOLM3.401$uI3.firstname.lastname@example.org> X-Abuse-Info: Please be sure to forward a copy of ALL headers X-Abuse-Info: Otherwise we will be unable to process your complaint properly Distribution: world Date: Tue, 12 Oct 1999 19:16:47 GMT In article <email@example.com>, Danny Aldham <firstname.lastname@example.org> wrote: >Any user may overwrite any file with group auth (i.e. /etc/shadow, >/etc/passwd) using /etc/sysadm.d/bin/userOsa. My quick fix for this is to edit userOsa and replace the string "debug.log" with "/dev/null". -- John W. Temples, III
Got something to add? Send me email.
(OLDER) <- More Stuff -> (NEWER) (NEWEST)
Printer Friendly Version
Increase ad revenue 50-250% with Ezoic