Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 106337 - unnessasary suid root set on /usr/bin/ct with net-dialup/mgetty-1.1.30-r2
Summary: unnessasary suid root set on /usr/bin/ct with net-dialup/mgetty-1.1.30-r2
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Unspecified (show other bugs)
Hardware: x86 Linux
: High minor (vote)
Assignee: Alin Năstac (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-09-17 22:00 UTC by Donald Donovan
Modified: 2006-11-20 12:41 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Donald Donovan 2005-09-17 22:00:35 UTC
the /usr/bin/ct command included with at least net-dialup/mgetty-1.1.30-r2 is
installed suid root (may include other versions). This command does not appear
to actually implement the ct command however, so having this suid root is
unnessasary.

Reproducible: Always
Steps to Reproduce:
1. emerge =net-dialup/mgetty-1.1.30-r2
2. ls -l /usr/bin/ct


Actual Results:  
/usr/bin/ct is installed suid root.

Expected Results:  
Installed with sensable permissions.
Comment 1 Alin Năstac (RETIRED) gentoo-dev 2005-09-21 13:07:48 UTC
the source code of the ct executable is this:
#include <stdio.h>

#include "mgetty.h"

int main _P2((argc, argv),  int argc, char ** argv )
{
    fprintf( stderr, "ct: not yet implemented\n" );
    return 1;
}

evidently, it isn't a security risk. what would be the point of removing suid
attribute in this version? it will only make the life harder for the mgetty
maintainer when a new version with a brand new ct will come.
Comment 2 Alin Năstac (RETIRED) gentoo-dev 2006-11-20 11:06:25 UTC
reopen bug - time to fix it, along with bug 155670.
Comment 3 Alin Năstac (RETIRED) gentoo-dev 2006-11-20 11:06:41 UTC
reopen bug - time to fix it, along with bug 155670.
Comment 4 Alin Năstac (RETIRED) gentoo-dev 2006-11-20 12:35:25 UTC
Now hopefully I manage to reopen it (sorry for the spam).
Comment 5 Alin Năstac (RETIRED) gentoo-dev 2006-11-20 12:41:34 UTC
Fixed in 1.1.35-r2 - ct is no longer installed.