ftpd security issue ?

gabor at zahemszky.hu gabor at zahemszky.hu
Fri Dec 9 12:24:41 UTC 2011


 On Fri, 09 Dec 2011 15:39:15 +0700, Eugene Grosbein wrote:
> 09.12.2011 15:25, Xin LI пишет:
>> On Fri, Dec 9, 2011 at 12:04 AM,  <gabor at zahemszky.hu> wrote:
>>> Hi!
>>>
>>> Are the following steps enough to prevent me?
>>>
>>> # for user in user1 user2 .... ; do
>>> mkdir -p ~$user/lib ~$user/usr/lib ~$user/etc
>>> chflags sunlink,schg ~$user/lib ~$user/usr ~$user/usr/lib 
>>> ~$user/etc
>>> done
>>> #
>>
>> Yes that should be sufficient workaround.
>
> Why /lib and /usr/lib only?

 ??? /lib, /usr/lib and /etc.

 Which directory is missing?

 Gábor < Gabor at Zahemszky dot HU >


More information about the freebsd-security mailing list