On 17/10/13 17:43, Ian Bolton wrote:
> The tiger script check_suid does the equivalent of:
>
> strings dbus-daemon-launch-helper | grep -E '\.\./'
...
> ../../dbus/dbus-connection.c
> ../../dbus/dbus-errors.c
> ../../dbus/dbus-message.c
> ../../dbus/dbus-pending-call.c
> ../../dbus/dbus-signature.c
> ../../dbus/dbus-watch.c
> ../../dbus/dbus-bus.c
> ../../dbus/dbus-server.c
This tool is presumably looking for attempts to read, write or execute
relative paths. This output looks very much like a false positive: the
strings appear in debug or warning messages to identify the module
emitting the message.
S
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
