search for: sietch

I''ll just include the letter that I sent to John Carmack and Dave "Zoid" Kirsch concerning this problem. ---------------------------------------------------------------------- From: Greg Alexander <galexand@sietch.bloomington.in.us> Approved: R.E.Wolff@BitWizard.nl To: zoid@threewave.com cc: johnc@idsoftware.com Subject: Security hole in squake. Please respond with this mail if for nothing else than just to say "I got it, I don''t give a damn, go away." just so I know you got it...other...

...s like 2.0.32-pre5 fixes the f00f bug on SMP machines properly. All of these are available on ftp.kernel.org: ftp://ftp.kernel.org/pub/linux/kernel/testing/pre-patch-2.0.32-5.gz ftp://ftp.kernel.org/pub/linux/kernel/v2.1/linux-2.1.63.tgz Greg Alexander - also <gralexan@indiana.edu> - http://sietch.home.ml.org/ ---- Something not being where it should be does not necessitate it being where it doesn''t belong. -- Really freakin obvious

...is leads to a root hole. -- REW] A quick check shows that mkstemp() is implemented in glibc2.0.7-pre1 using 0666 as well, but that was just from a prefunctory glance at the code -- something may be going on that I didn''t notice. Greg Alexander - also <gralexan@indiana.edu> - http://sietch.home.ml.org/ ---- Any sufficiently advanced bug is indistinguishable from a feature. -- Rich Kulawiec

...e to upgrade libc5 versions with libc6 so imminent. I did test this on BSDI BSD/OS 3.1. BSD/OS seemed a lot more intelligent (i.e. kept on creating unique filenames) but a /lot/ slower than I would have expected (only subjectively so). Greg Alexander - also <gralexan@indiana.edu> - http://sietch.home.ml.org/ ---- Don''t ever do anything that you can''t later justify with "It seemed like a good idea at the time." -- Greg''s Bible From mail@mail.redhat.com Apr 02:04:14 1998 (EDT) -0400 Received: (qmail 12662 invoked from network); 14 Apr 1998 06:03:36 -0...