cpet/freebsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add a message to the port/package warning users about kcheckpass's

Browse Source 
setuid root bit, which is off by default.  The purpose is to avoid
having users who don't use kcheckpass become vulnerable to a root
exploit.  For more details see the actual pkg-message.  Bump PORTREVISION
to reflect this change in the package.

As a side note, I'm a little wary about adding something like this so
close to the ports freeze for 4.4-RELEASE.  However, I decided that it
was a minimal risk and went ahead with it in the hopes of avoiding the
need for users to run into this "problem" themselves...
This commit is contained in:
Will Andrews 2001-09-03 17:48:23 +00:00
parent 385a7c1d99
commit 369fcbb329
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=47378
16 changed files with 200 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
x11/kde4-baseapps/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kde4-baseapps/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kde4-runtime/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kde4-runtime/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kde4-workspace/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kde4-workspace/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kdebase2/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kdebase2/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kdebase3/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kdebase3/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kdebase4-runtime/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kdebase4-runtime/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kdebase4-workspace/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kdebase4-workspace/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************

5
x11/kdebase4/Makefile
View File

@ -7,7 +7,7 @@
PORTNAME= kdebase
PORTVERSION= 2.2
PORTREVISION= 1
PORTREVISION= 2
CATEGORIES?= x11 kde
MASTER_SITES= ${MASTER_SITE_KDE}
MASTER_SITE_SUBDIR= stable/${PORTVERSION}/src
@ -63,4 +63,7 @@ pre-configure:
post-configure:
${PERL} -pi -e "s@444@644@g" ${WRKSRC}/kdesktop/init/Templates/Makefile
post-install:
@${CAT} ${PKGMESSAGE}
.include <bsd.port.post.mk>

21
x11/kdebase4/pkg-message Normal file
View File

@ -0,0 +1,21 @@
************************** I M P O R T A N T ****************************
This package (kdebase2) installs a program called kcheckpass which is
used by kdm or screensavers to check the user's password. This activity
requires it to be setuid root. However, for security reasons, FreeBSD
leaves the setuid bit on this binary off by default, for several reasons.
First, some people may not use screensavers or kdm at all. Second,
others may choose to use a different screensaver or display manager
utility. And finally, there may be holes in kcheckpass which can be
exploited to gain root privileges. FreeBSD chooses not to take that risk
with the default package. If you decide that you need it setuid root,
you can make it so:
chmod u+s ${PREFIX}/bin/kcheckpass
..where ${PREFIX} is the prefix where this package was installed. It is
typically /usr/local but may also be /usr/X11R6 or /usr.
************************** I M P O R T A N T ****************************