Patch-ID# 100383-06
Keywords: security rdist setuid client remote distfile
Synopsis: SunOS 4.0.3;4.1;4.1.1;4.1.2;4.1.3: rdist security and hard links enhancement, 
Date: Jan/26/93
 
SunOS release: 4.0.3, 4.1, 4.1.1, 4.1.2, 4.1.3
 
Unbundled Product: 
 
Unbundled Release: 
 
Topic: adds hard link fix for bug#1059506 
 
BugId's fixed with this patch: 1069497 1074961 1059506

Changes incorporated in this version: 1059506

Architectures for which this patch is available: sun3(all), sun4(all)

Patches which may conflict with this patch:

Obsoleted by: 

Problem Description:  /usr/ucb/rdist under some conditions can be forced
                      to create setuid root programs thus causing a security 
                      problem 

		      /usr/ucb/rdist does not transfer hard linked files

INSTALL: 
 
As root:

mv /usr/ucb/rdist /usr/ucb/rdist.FCS
chmod 100 /usr/ucb/rdist.FCS
cp `arch`/{4.0.3,4.1,4.1.1,4.1.2,4.1.3}/rdist /usr/ucb/rdist
chmod 4751 /usr/ucb/rdist
chown root.staff /usr/ucb/rdist