Patch-ID# 100383-05
Keywords:  security rdist setuid client remote distfile
Synopsis: SunOS 4.0.3;4.1;4.1.1;4.1.2;4.1.3: rdist security enhancement
Date: 10/Sep/92
 
SunOS release: 4.0.3, 4.1, 4.1.1, 4.1.2 4.1.3
 
Unbundled Product: 
 
Unbundled Release: 
 
Topic: Patch version update for 4.1.3 compatibility
 
BugId's fixed with this patch: 1069497 1074961

Architectures for which this patch is available: application arch sun3, sun4

Patches which may conflict with this patch:

Obsoleted by: 

Problem Description:  /usr/ucb/rdist under some conditions can be forced
                      to create setuid root programs thus causing a security 
                      problem

INSTALL: 
 
As root:

mv /usr/ucb/rdist /usr/ucb/rdist.FCS
chmod 100 /usr/ucb/rdist.FCS
cp `arch`/{4.0.3,4.1,4.1.1,4.1.2,4.1.3}/rdist /usr/ucb/rdist
chmod 4751 /usr/ucb/rdist
chown root.staff /usr/ucb/rdist