Re: 'export RESOLV_HOST_CONF= any file you want' local vulnerability

2001-01-09 Thread Christoph Baumann
On Tue, Jan 09, 2001 at 11:08:56AM +, Julian Gilbey wrote:
> Most weird.  I get this behaviour when running through a setuid root
> strace, but I don't get the error messages (and hence the content of
> /etc/shadow) when I don't use strace.  I'm still running potato.

I have some more oddities to add.
When I set RESOLV_HOST_CONF=/etc/shadow and run "fping debian.org" I don't
get /etc/shadow displayed. Even running it with a +s strace doesn't work.
But when I use "sudo fping ..." I get /etc/shadow displayed (which
shouldn't be such a big hole in that case). I too tried it with potato.

Christoph 


-- 
* Christoph Baumann  *
* [EMAIL PROTECTED]  *
* www.rzuser.uni-heidelberg.de/~cbauman1/welcome.html*
* "External Error : INTELLIGENCE not found !"*




Non-Debian Debian Packages (maelstrom and libsdl)

2000-03-21 Thread Christoph Baumann
Hi!

I just came across some strange debs on
http://www.devolution.com/~slouken/SDL/download-1.0.html
and
http://www.devolution.com/~slouken/Maelstrom/binary.html

I downloaded and extraced them. They aren't policy compliant and contain
evil dependencies. e.g. the maelstrom package has this:
Depends: sdl1(>=3D1.0)
sdl1 isn't a official Debian package it should be libsdl1.
As I'm the maintainer of maelstrom I'm rather concerned. I will now
contact this "maintainer".

Christoph

-- 
* Christoph Baumann  *
* [EMAIL PROTECTED]  *
* www.rzuser.uni-heidelberg.de/~cbauman1/welcome.html*
* "External Error : INTELLIGENCE not found !"*



pgpH8BGs1iGEM.pgp
Description: PGP signature


Re: Debian booth at LinuxTag '99?

1999-01-22 Thread Christoph Baumann
On Thu, Jan 21, 1999 at 03:45:46PM +0100, Philipp Frauenfelder wrote:
> Btw, how much is a "stone throw"?
According to the map I used it's 62.5 km (if you go by plane). By train it
will take 1.5 h .

Christoph

-- 
* Christoph Baumann  *
* [EMAIL PROTECTED]  *
* www.rzuser.uni-heidelberg.de/~cbauman1/welcome.html*
* "External Error : INTELLIGENCE not found !"*




pgpkMBE9N0Qh9.pgp
Description: PGP signature


Re: Debian booth at LinuxTag '99?

1999-01-21 Thread Christoph Baumann
Hi!

Someone mentioned the youth hostel at Hochspeyer. I know it. It is rather
big and Hochspeyer has railroad connection to Kaiserslautern.
Maybe I can also get a car to assist Thimo with transporting if someone
wants to stay in Heidelberg (we have a youth hostel too, I can't offer
sleeping place, sorry). 

Christoph

-- 
* Christoph Baumann  *
* [EMAIL PROTECTED]  *
* www.rzuser.uni-heidelberg.de/~cbauman1/welcome.html*
* "External Error : INTELLIGENCE not found !"*


pgpPer5NsB4It.pgp
Description: PGP signature