Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <5905c9fb-9fc8-4cf1-ac29-ed830c8ae5a1@email.android.com>
Date: Wed, 15 Jan 2014 16:42:08 +0800
From: orc <orc@...server.ru>
To: musl@...ts.openwall.com
Subject: install.sh is wrong with libc.so

In case of executable files (which libc.so is), install.sh is wrong and dangerous.

The sequence of commands of install.sh from 0.9.15:

umask 077
cat < lib/libc.so > /lib/libc.so.tmp.pid # /lib/libc.so.tmp.pid is created with mode 600
mv -f /lib/libc.so.tmp.pid /lib/libc.so
chmod 755 /lib/libc.so # failed with "Permission denied"

After that the system is unusable and requires external assistance.

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.