Setuid

Differences between revisions 5 and 6
⇤ ← Revision 5 as of 2007-10-31 17:20:39 →
Size: 411
Editor: office4
Comment: Adding /bin/arping
← Revision 6 as of 2007-10-31 17:46:32 → ⇥
Size: 562
Editor: office4
Comment: Looked at the source for fping and determined it needs a patch
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
|| '''Source Package Name''' || '''setuid Files''' || '''De-rooted''' || '''Capabilities''' || '''Changes Sent Upstream''' || || '''Source Package Name''' || '''setuid Files''' || '''De-rooted''' || '''Capabilities''' || '''Changes Sent Upstream''' || '''Comments''' ||
Line 5: Line 5:
|| fping || /bin/fping || needed || || no || Checks: if ( geteuid() ) {... exit(3); Will patch and send upstream -JeffSchroeder ||

This is a list of setuid applications that need investigation. See the [https://lists.ubuntu.com/archives/ubuntu-hardened/2007-October/000217.html mailinglist post] about this for more information.

Source Package Name

setuid Files

De-rooted

Capabilities

Changes Sent Upstream

Comments

iputils

/bin/ping, /bin/ping6, /bin/arping

yes

possible

UNKNOWN

fping

/bin/fping

needed

no

Checks: if ( geteuid() ) {... exit(3); Will patch and send upstream -JeffSchroeder

Security/Investigation/Setuid (last edited 2013-07-23 07:07:01 by 74)