Prev: comp.unix.solaris charter
Next: Solaris 10, still difference in df / du output after patching
From: Martin Paul on 22 Apr 2008 03:31
Just FYI - recent patches for Solaris 8-10 (e.g. 119254-46/119255-46,
BugID 6344676) have changed the default behaviour of the unzip command.
It does not set the SUID bit on extracted files anymore by default.
There's a new option -K to force the old behaviour.

This is a security fix; see:

http://sunsolve.sun.com/search/document.do?assetkey=1-66-200844-1

but it was confusing as I used unzip in a jumpstart finish script to
extract a self-compiled version of openssh to /opt/, which contains
libexec/ssh-keysign which must have the SUID bit set to work.

mp.
--
SysAdmin | Institute of Scientific Computing, University of Vienna
PCA | Analyze, download and install patches for Solaris
| http://www.par.univie.ac.at/solaris/pca/
 | 
Pages: 1
Prev: comp.unix.solaris charter
Next: Solaris 10, still difference in df / du output after patching