> Well, if /sbin is not in the user's PATH, then s/he can't start the
> wrapper even, only with full path. Can you please give me some
> information when such thing happens that user can start the
> wrapper, but s/he has not /sbin in PATH?
You're, of course, right. Nothing prevents people from ru
> Ups, you misunderstood me. I'm asking how someone can start gradm2 (the
> wrapper) without /sbin in PATH? You have to have /sbin in PATH to start
Well, some people start these things using an absolute path instead of
adding /sbin to their PATH. Don't ask me why they'd do that but I've seen it
s
Package: gradm2
Version: 2.1.5-2
Severity: normal
Tags: patch
gradm2's wrapper script, /sbin/gradm2, will only work if the user invoking
it has /sbin in their PATH. For c&p convenience, here's a "patch":
sed -i 's/gradm/\/sbin\/gradm/' gradm2
Best regards,
Jan 'jast' Krueger
--
To UNSUBSCRIBE
Subject: gradm2: Wrapper script breaks role authentication
Package: gradm2
Version: 2.1.5-1
Severity: important
Tags: patch
I'm using Grsecurity 2.1.5 (upstream version) together with Linux
2.6.11.7 (upstream version). When authenticating to a special role using
a password, for example "gradm2 -a
4 matches
Mail list logo
