info-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Setuid/gid Error in CVS


From: Larry Jones
Subject: Re: Setuid/gid Error in CVS
Date: Thu, 11 Mar 2004 23:02:24 -0500 (EST)

Gagneet Singh writes:
> 
> Can't do setuid

Standard CVS has no such message.

> cvs server: Pre-commit check failed

That implies that you have a commitinfo script that's failing -- my
guess is that the above error message is comming from the script.

> When I changed the permissions of the 'cvs_acls' script from 2775 to
> 2777, the follwoing message is coming, and the loginfo script is not
> sending the mails, but commits are going through:
> 
> Setuid/gid script is writable by world.

That implies that the script is setuid, probably to the wrong UID now
that you've changed them.  (And note that a world-writable setuid script
is a gaping security hole.)

-Larry Jones

Something COULD happen today.  And if anything DOES,
by golly, I'm going to be ready for it! -- Calvin




reply via email to

[Prev in Thread] Current Thread [Next in Thread]