root could setup /dev/xsession-errors or even ~/.xsession-errors to be an
acctual null dev with a cp -a and a chown.

--- Tomasz Wegrzanowski <[EMAIL PROTECTED]> wrote:
> On Sun, Feb 29, 2004 at 05:23:46PM -0500, Joey Hess wrote:
> > Tomasz Wegrzanowski wrote:
> > > When I tried it as root, X worked, but the /dev/null became 0600.
> > > So it seems it wants to chmod 0600 .xsession-errors.
> > 
> > That would probably be a security hole (at least a DOS: make ld.so 600
> > and the system stops working), but I cannot reproduce it with
> > xserver-xfree86 4.2.1-10.
> 
> Only if you can ln -sf /lib/ld.so /root/.xsession-errors, what you
> probably cannot. User with normal rights can't chmod /dev/null, and
> that's (probably) why it crashes.
> 
> 


__________________________________
Do you Yahoo!?
Get better spam protection with Yahoo! Mail.
http://antispam.yahoo.com/tools


Reply via email to