[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Setuid/gid Error in CVS
From: |
Larry Jones |
Subject: |
Re: Setuid/gid Error in CVS |
Date: |
Thu, 11 Mar 2004 23:02:24 -0500 (EST) |
Gagneet Singh writes:
>
> Can't do setuid
Standard CVS has no such message.
> cvs server: Pre-commit check failed
That implies that you have a commitinfo script that's failing -- my
guess is that the above error message is comming from the script.
> When I changed the permissions of the 'cvs_acls' script from 2775 to
> 2777, the follwoing message is coming, and the loginfo script is not
> sending the mails, but commits are going through:
>
> Setuid/gid script is writable by world.
That implies that the script is setuid, probably to the wrong UID now
that you've changed them. (And note that a world-writable setuid script
is a gaping security hole.)
-Larry Jones
Something COULD happen today. And if anything DOES,
by golly, I'm going to be ready for it! -- Calvin