On Monday 13 August 2007 21:00, Jari Takkala wrote:
> On Monday, August 13, 2007 3:30 PM, Denys Vlasenko wrote:
> > you can build latest svn with only syslogd and logread,
> > while all other /bin/applet links are symlinked to "stable" busybox.
>
> Don't know why I didn't think about that. :)
>
> Ok, I tested it with the latest SVN trunk and the problem appears to be
> fixed.
>
> On a related note, shouldn't the permissions for the shared memory segment
> be 755? I think currently any unprivileged user could overwrite the log
> buffer or edit log messages.

Yup.

-        G.shmid = shmget(KEY_ID, G.shm_size, IPC_CREAT | 1023);
+        G.shmid = shmget(KEY_ID, G.shm_size, IPC_CREAT | 0644);

That was really weird way to say "0777".
--
vda
_______________________________________________
busybox mailing list
[email protected]
http://busybox.net/cgi-bin/mailman/listinfo/busybox

Reply via email to