Commit Graph

2 Commits

Author SHA1 Message Date
Peter Wemm
8de3884106 Fix the utmp handling that was broken by the security patch.
It was:
 - setting the euid from the real groupid (yow!)
 - not recovering it's setuid permissions when cleaning the utmp file.
I've left in some diagnostic code for "shouldn't happen" cases.
1996-02-24 14:55:37 +00:00
Paul Traina
4157893907 Patch around a security vulnerability in rxvt. Give up root privileges when
they're not necessary.  RXVT's handling of /etc/utmp is blatantly idiotic
under FreeBSD but at least it's not a security hole anymore.

Obtained from: Marc Ewing (marc@redhat.com) from BUGTRAQ mailing list.
1996-01-11 09:00:12 +00:00