[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Re: ADVISORY: shadow file vulnerability:cause & workaround



> Hi. Okay. Ran the recommended chmod on my shadow files since the this system
> was setup and all of the sites were imported with CMU some time ago.
> I downloaded the patch from Jeffs site...
> Fix for CMU security problem, as root do the following:
> $ wget ftp://ftp.cobaltnet.com/pub/users/jeffb/cmu/shadowfix.patch
> $ patch -p0 shadowfix.patch

> But when I run the command
> $ patch -p0 shadowfix.patch

I forgot one key character in the command line, it should read:
$ patch -p0 < shadowfix.patch

If you ran the first command you can just ctrl-c out of it.
Jeff-