19 Feb 2006 19:01
World-writable installation directories
Felix Kühling <fxkuehl <at> gmx.de>
2006-02-19 18:01:27 GMT
2006-02-19 18:01:27 GMT
Hi,
by default the installation directories of TORCS are world-writable.
This is a pretty bad thing from a security point-of-view. This small
patch to the mkinstalldirs script in CVS fixes the problem:
Index: mkinstalldirs
===================================================================
RCS file: /cvsroot/torcs/torcs/torcs/mkinstalldirs,v
retrieving revision 1.1.1.1
diff -u -r1.1.1.1 mkinstalldirs
--- mkinstalldirs 24 Jun 2001 17:43:16 -0000 1.1.1.1
+++ mkinstalldirs 19 Feb 2006 18:00:35 -0000
<at> <at> -8,8 +8,6 <at> <at>
errstatus=0
-umask 000
-
for file
do
set fnord `echo ":$file" | sed -ne 's/^:\//#/;s/^://;s/\// /g;s/^#/\//;p'`
Please consider applying this to CVS.
Regards,
Felix
--
--
| Felix Kühling <fxkuehl <at> gmx.de> http://fxk.de.vu |
(Continue reading)
RSS Feed