Debian bug report logs - #1726, boring messages

Subject: Bug#1726: permissions on svgalib utilities
Reply-To: Austin Donnelly <and1000@cam.ac.uk>, debian-bugs@pixar.com
Resent-From: Austin Donnelly <and1000@cam.ac.uk>
Resent-To: debian-devel@pixar.com
Resent-Date: Sat, 21 Oct 1995 21:33:03 GMT
Resent-Message-ID: <debian-bugs-handler.1726.B10212124090@pixar.com>
Resent-Sender: iwj10@cus.cam.ac.uk
X-Debian-PR-Package: svgalib
X-Debian-PR-Keywords: 
Received: via spool for debian-bugs; Sat, 21 Oct 1995 21:33:03 GMT
Received: with rfc822 via encapsulated-mail; Sat, 21 Oct 1995 21:24:07 GMT
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t6lNg-000BEKC; Sat, 21 Oct 95 14:23 PDT
Received: from black.csi.cam.ac.uk by pixar.com with SMTP id AA01932
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sat, 21 Oct 1995 14:22:38 -0700
Received: from valour.pem.cam.ac.uk [131.111.200.47] (ident = root)
	by black.csi.cam.ac.uk with smtp
	(Smail-3.1.29.0 #36) id m0t6lNa-000CCJC; Sat, 21 Oct 95 22:22 BST
Received: by valour.pem.cam.ac.uk
	id m0t6lOK-000z5NC
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Sat, 21 Oct 95 22:23 BST
Date: Sat, 21 Oct 1995 22:23:44 +0100 (BST)
From: Austin Donnelly <and1000@cam.ac.uk>
X-Sender: and1000@valour.pem.cam.ac.uk
To: debian-bugs@pixar.com
Message-Id: <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII


Package: svgalib
Version: 1.25-4

The following programs are installed setuid root:
  restoretextmode
  restorefont
  restorepalette
  dumpreg
  fix132x43

This allows any user to completely hose the console at will.

Can I suggest that they be made:
      -rwsr-x---   1 root     console
(this requires a new group, console, to be created).

Austin

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Austin Donnelly <and1000@cam.ac.uk>
Subject: Bug#1726: Acknowledgement (was: permissions on svgalib utilities)
In-Reply-To: <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>
References: <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>

Thank you for the problem report you have sent regarding Debian GNU/Linux.
This is an automatically generated reply, to let you know your message has
been received.  It is being forwarded to the developers' mailing list for
their attention; they will reply in due course.

If you wish to submit further information on your problem, please send
it to debian-bugs@pixar.com, but please ensure that the Subject
line of your message starts with "Bug#1726" or "Re: Bug#1726" so that
we can identify it as relating to the same problem.

Please do not reply to the address at the top of this message,
unless you wish to report a problem with the bug-tracking system.

Ian Jackson
(maintainer, debian-bugs)

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Richard Kettlewell <richard@elmail.co.uk>
In-Reply-To: <cMAKoy2xi0@sfere.elmail.co.uk>
References: <cMAKoy2xi0@sfere.elmail.co.uk> <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>
Subject: Bug#1726: marked as done (was: permissions on svgalib utilities)

Your message dated Sun, 29 Oct 95 02:25:39 +0000 (GMT)
with message-id <cMAKoy2xi0@sfere.elmail.co.uk>
and subject line Bug#1726: permissions on svgalib utilities
has caused the attached bug report to be marked as done.

It is your now responsibility to ensure that the bug report is dealt
with.

(NB: If you are a system administrator and have no idea what I'm
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Ian Jackson
(maintainer, debian-bugs)

Received: with rfc822 via encapsulated-mail; Sat, 21 Oct 1995 21:24:07 GMT
From cam.ac.uk!and1000 Sat Oct 21 14:23:04 1995
Return-Path: <and1000@cam.ac.uk>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0t6lNg-000BEKC; Sat, 21 Oct 95 14:23 PDT
Received: from black.csi.cam.ac.uk by pixar.com with SMTP id AA01932
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Sat, 21 Oct 1995 14:22:38 -0700
Received: from valour.pem.cam.ac.uk [131.111.200.47] (ident = root)
	by black.csi.cam.ac.uk with smtp
	(Smail-3.1.29.0 #36) id m0t6lNa-000CCJC; Sat, 21 Oct 95 22:22 BST
Received: by valour.pem.cam.ac.uk
	id m0t6lOK-000z5NC
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Sat, 21 Oct 95 22:23 BST
Date: Sat, 21 Oct 1995 22:23:44 +0100 (BST)
From: Austin Donnelly <and1000@cam.ac.uk>
X-Sender: and1000@valour.pem.cam.ac.uk
To: debian-bugs@pixar.com
Subject: permissions on svgalib utilities
Message-Id: <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII


Package: svgalib
Version: 1.25-4

The following programs are installed setuid root:
  restoretextmode
  restorefont
  restorepalette
  dumpreg
  fix132x43

This allows any user to completely hose the console at will.

Can I suggest that they be made:
      -rwsr-x---   1 root     console
(this requires a new group, console, to be created).

Austin

From: iwj10@thor.cam.ac.uk (Ian Jackson)
To: Austin Donnelly <and1000@cam.ac.uk>
Subject: Bug#1726 acknowledged by developer (was: permissions on svgalib utilities)
References: <cMAKoy2xi0@sfere.elmail.co.uk> <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>
In-Reply-To: <Pine.LNX.3.91.951021221347.1971A-100000@valour.pem.cam.ac.uk>

This is an automatic notification regarding your bug report.

Responsibility for it has been taken by one of the developers, namely
Richard Kettlewell <richard@elmail.co.uk>.

You should be hearing from them with a substantive response shortly, if
you have not already done so.  If not, please contact them directly,
or email debian-bugs@pixar.com or myself.

Ian Jackson
(maintainer, debian-bugs)