aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGerard Beekmans <gerard@linuxfromscratch.org>2001-08-09 01:05:51 +0000
committerGerard Beekmans <gerard@linuxfromscratch.org>2001-08-09 01:05:51 +0000
commit6892a732276a80a648d3e4914ecf9852ab523632 (patch)
tree8e0a373f7a3f07b0f67d05f9e31d2f770ab4994f
parent7f01eef0f4cf564a11f0c438422872feb0e7621f (diff)
Fixed ed symlink vulnerability
git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@949 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
-rw-r--r--chapter06/ed-exp.xml7
-rw-r--r--chapter06/ed-inst.xml7
-rw-r--r--chapter06/ed.xml1
-rw-r--r--index.xml1
4 files changed, 15 insertions, 1 deletions
diff --git a/chapter06/ed-exp.xml b/chapter06/ed-exp.xml
new file mode 100644
index 000000000..345ae6510
--- /dev/null
+++ b/chapter06/ed-exp.xml
@@ -0,0 +1,7 @@
+<sect2>
+<title>Command explanations</title>
+
+<para><userinput>Insert proper symlink bug explanation here.</para>
+
+</sect2>
+
diff --git a/chapter06/ed-inst.xml b/chapter06/ed-inst.xml
index 4e896a9cc..ced1cb48d 100644
--- a/chapter06/ed-inst.xml
+++ b/chapter06/ed-inst.xml
@@ -3,7 +3,12 @@
<para>Install Ed by running the following commands:</para>
-<para><screen><userinput>./configure --prefix=/usr &amp;&amp;</userinput>
+<para><screen><userinput>cp buf.c buf.c-backup &amp;&amp;</userinput>
+<userinput>sed 's/int u/int u, sfd/' buf.c-temp | \</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;sed '/.*\*mktemp.*/d' | \</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;sed 's/.*if (mktemp.*/ sfd = mkstemp(sfn);\</userinput>
+<userinput>&nbsp;&nbsp;&nbsp;if ((sfd == -1) || (sfp = fopen (sfn, "w+")) == NULL)/' &gt; buf.c</userinput>
+<userinput>./configure --prefix=/usr &amp;&amp;</userinput>
<userinput>make &amp;&amp;</userinput>
<userinput>make install &amp;&amp;</userinput>
<userinput>mv /usr/bin/ed /usr/bin/red /bin</userinput></screen></para>
diff --git a/chapter06/ed.xml b/chapter06/ed.xml
index ede6fc9f6..ff04effc9 100644
--- a/chapter06/ed.xml
+++ b/chapter06/ed.xml
@@ -5,6 +5,7 @@
Estimated disk space required: &ed-compsize;</screen>
&c6-ed-inst;
+&c6-ed-exp;
&aa-ed-desc;
</sect1>
diff --git a/index.xml b/index.xml
index 4f15d5012..38fd4043f 100644
--- a/index.xml
+++ b/index.xml
@@ -199,6 +199,7 @@
<!ENTITY c6-makedev-exp SYSTEM "chapter6/makedev-exp.xml">
<!ENTITY c6-ed SYSTEM "chapter6/ed.xml">
<!ENTITY c6-ed-inst SYSTEM "chapter6/ed-inst.xml">
+<!ENTITY c6-ed-exp SYSTEM "chapter6/ed-exp.xml">
<!ENTITY c6-patch SYSTEM "chapter6/patch.xml">
<!ENTITY c6-patch-inst SYSTEM "chapter6/patch-inst.xml">
<!ENTITY c6-gcc SYSTEM "chapter6/gcc.xml">