diff options
author | Gerard Beekmans <gerard@linuxfromscratch.org> | 2001-08-09 01:05:51 +0000 |
---|---|---|
committer | Gerard Beekmans <gerard@linuxfromscratch.org> | 2001-08-09 01:05:51 +0000 |
commit | 6892a732276a80a648d3e4914ecf9852ab523632 (patch) | |
tree | 8e0a373f7a3f07b0f67d05f9e31d2f770ab4994f | |
parent | 7f01eef0f4cf564a11f0c438422872feb0e7621f (diff) |
Fixed ed symlink vulnerability
git-svn-id: http://svn.linuxfromscratch.org/LFS/trunk/BOOK@949 4aa44e1e-78dd-0310-a6d2-fbcd4c07a689
-rw-r--r-- | chapter06/ed-exp.xml | 7 | ||||
-rw-r--r-- | chapter06/ed-inst.xml | 7 | ||||
-rw-r--r-- | chapter06/ed.xml | 1 | ||||
-rw-r--r-- | index.xml | 1 |
4 files changed, 15 insertions, 1 deletions
diff --git a/chapter06/ed-exp.xml b/chapter06/ed-exp.xml new file mode 100644 index 000000000..345ae6510 --- /dev/null +++ b/chapter06/ed-exp.xml @@ -0,0 +1,7 @@ +<sect2> +<title>Command explanations</title> + +<para><userinput>Insert proper symlink bug explanation here.</para> + +</sect2> + diff --git a/chapter06/ed-inst.xml b/chapter06/ed-inst.xml index 4e896a9cc..ced1cb48d 100644 --- a/chapter06/ed-inst.xml +++ b/chapter06/ed-inst.xml @@ -3,7 +3,12 @@ <para>Install Ed by running the following commands:</para> -<para><screen><userinput>./configure --prefix=/usr &&</userinput> +<para><screen><userinput>cp buf.c buf.c-backup &&</userinput> +<userinput>sed 's/int u/int u, sfd/' buf.c-temp | \</userinput> +<userinput> sed '/.*\*mktemp.*/d' | \</userinput> +<userinput> sed 's/.*if (mktemp.*/ sfd = mkstemp(sfn);\</userinput> +<userinput> if ((sfd == -1) || (sfp = fopen (sfn, "w+")) == NULL)/' > buf.c</userinput> +<userinput>./configure --prefix=/usr &&</userinput> <userinput>make &&</userinput> <userinput>make install &&</userinput> <userinput>mv /usr/bin/ed /usr/bin/red /bin</userinput></screen></para> diff --git a/chapter06/ed.xml b/chapter06/ed.xml index ede6fc9f6..ff04effc9 100644 --- a/chapter06/ed.xml +++ b/chapter06/ed.xml @@ -5,6 +5,7 @@ Estimated disk space required: &ed-compsize;</screen> &c6-ed-inst; +&c6-ed-exp; &aa-ed-desc; </sect1> @@ -199,6 +199,7 @@ <!ENTITY c6-makedev-exp SYSTEM "chapter6/makedev-exp.xml"> <!ENTITY c6-ed SYSTEM "chapter6/ed.xml"> <!ENTITY c6-ed-inst SYSTEM "chapter6/ed-inst.xml"> +<!ENTITY c6-ed-exp SYSTEM "chapter6/ed-exp.xml"> <!ENTITY c6-patch SYSTEM "chapter6/patch.xml"> <!ENTITY c6-patch-inst SYSTEM "chapter6/patch-inst.xml"> <!ENTITY c6-gcc SYSTEM "chapter6/gcc.xml"> |