[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    Re: We just appeared on BUGTRAQ
From:       Geert Jansen <g.t.jansen () stud ! tue ! nl>
Date:       2000-05-28 23:06:07
[Download RAW message or body]

Daniel Naber wrote:
> On Mon, 29 Mai 2000, Geert Jansen wrote:
> 
> > Anyway, it is fixed now. It might be a good idea to give kdesud (and
> > the other suid/sgid programs) a security audit before KDE2.0..
> 
> Can you make a list of these programs? I wouldn't even know what
> programs to audit now...

The programs are:

konsole_grantpty (suid root)
kcheckpass (suid root)
kdesud (sgid nogroup)
artswrapper (suid root, but currently it seems not to be)

Greetings,
-- 
    Geert Jansen                       email: <g.t.jansen at stud.tue.nl>
    Phylosopher, Physicist,                    email: <jansen at kde.org>           
    KDE enthusiast                                 PGP key ID: 0xD2B5E7CE            

[prev in list] [next in list] [prev in thread] [next in thread]