annotated 124-126

This commit is contained in:
Todd C. Miller
1995-07-09 22:17:12 +00:00
parent 14ec8cc12b
commit 8d2e68cbb2

View File

@@ -377,10 +377,14 @@ CHANGES from sudo 1.3.2
field in struct sockaddr. field in struct sockaddr.
124) Check ownership and permissions on timestamp dir and ignore if 124) Check ownership and permissions on timestamp dir and ignore if
not owned by root and mode 0700. not owned by root and mode 0700. Problem pointed out by Larry Auton
<lda@research.AT&T.com> and Navjot Singh <singh@research.AT&T.com>.
125) Ignore timestamp files with preposterous dates to keep people from 125) Ignore timestamp files with preposterous dates to keep people from
faking out sudo on OS's that allow you to give away files to root. faking out sudo on OS's that allow you to give away files to root.
Problem pointed out by Larry Auton <lda@research.AT&T.com> and
Navjot Singh <singh@research.AT&T.com>.
126) A timeout of 0 will now cause a password to be entered every 126) A timeout of 0 will now cause a password to be entered every
time. time. Based on a suggestion by Larry Auton <lda@research.AT&T.com>
and Navjot Singh <singh@research.AT&T.com>.