NetBSD-Users archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

/usr/bin/passwd suid



Hi again,

after upgrading from 6.0.5_PATCH to 6.0.6_PATCH, I got this:

	Setuid deletions:
	-r-sr-xr-x 2 root wheel 31003 Aug 27 15:13:03 2014 /usr/bin/passwd
	-r-sr-xr-x 2 root wheel 31003 Aug 27 15:13:03 2014 /usr/bin/yppasswd

and indeed:

	$ ls -la /usr/bin/passwd
	-r-xr-xr-x  3 root  wheel  31003 Oct  7 16:21 /usr/bin/passwd

This happened before:

	not sure what happened here but after the upgrade from 6.0.1_PATCH to
	6.0.2 the daily insecurity mail reported the following:

	Checking setuid files and devices:
	Setuid additions:
	-r-sr-xr-x 2 root wheel 31003 Jun 3 12:21:03 2013 /usr/bin/passwd
	-r-sr-xr-x 2 root wheel 31003 Jun 3 12:21:03 2013 /usr/bin/yppasswd

	https://mail-index.netbsd.org/netbsd-users/2013/06/04/msg012933.html

My upgrade procedure is simple and always the same..


Thanks for any ideas or pointers,

		Petar


Home | Main Index | Thread Index | Old Index