Patch-ID# 100383-02
Keywords:  security rdist setuid client remote distfile
Synopsis: SunOS 4.1;4.1.1; 4.0.3: rdist security enhancement
Date: 16-Sept-91
 
SunOS release: 4.1, 4.1.1 4.0.3
 
Unbundled Product: 
 
Unbundled Release: 
 
Topic: rdist security enhancement
 
BugId's fixed with this patch: 1069497

Architectures for which this patch is available: sun3, sun3x, sun4, sun4c

Patches which may conflict with this patch:

Obsoleted by: SYS_V Rel 4 

Problem Description:  /usr/ucb/rdist under some conditions can be forced
                      to create setuid root programs thus causing a security 
                      problem

INSTALL: 
 
as root:

# mv /usr/ucb/rdist /usr/ucb/rdist.FCS
# chmod 100 /usr/ucb/rdist.FCS
# cp sun{3,3x,4,4c}/{4.1,4.1.1}/rdist /usr/ucb/rdist
# chmod 4755 /usr/ucb/rdist
# chown root.staff /usr/ucb/rdist