HDTenEightyP/NetNews huggingface dataset:
From: jones@chpc.utexas.edu (Willaim L. Jones)
Subject: Re: AIX setuid/setgid security hole
Organization: The University of Texas System - CHPC
Date: Thu, 17 Dec 92 20:37:01 GMT



>From: mcharity@lcs.mit.edu (Mitchell N Charity)
>
>Bug:  setuid/setgid do not properly limit authority.
>Example:
>   A program running as root,
>   after successfully calling setgid(100) and setuid(100),
>   thus allegedly adopting guest/usr authority,
>   can still delete files from root/security owned directories.
>Security impact:
>   User written programs which begin running as root,
>   (in my case, a /bin/login replacement),
>   and appear to safeguard the filesystem by becoming a unprivileged user,
>   may in fact still have the authority to do significant damage.
>Bug status:
>  - I have begun the tortuous IBM support process.  No feedback yet.
>  - I have heard that a related bug, and an associated workaround,
>   were posted to this list.  Also that they were reported to IBM and CERT,
>   and ignored by both.  ?

You forgot about group membership.  You need to do the following sequence:

    setgid(basegid);
    initgroups(user, basegid);
    setuid(user);

If you don't do this the user inherits the root groups which
includes security.  This should fix you problem.

Bill Jones
    

Newsgroups: comp.unix.aix
From: timhu@ico.isc.com (Timothy Hu)
Subject: test, ignore
Organization: Interactive Systems Corp., Boulder CO
Date: Fri, 18 Dec 1992 21:24:06 GMT

Testing
From: wadswort@babss.UUCP (John H. Wadsworth)
Newsgroups: comp.unix.aix
Subject: Re: Call back by modem to login
Date: 15 Dec 92 17:31:52 GMT
Followup-To: comp.unix.aix
Organization: Bell Atlantic Business Systems Service Branford, Ct.

In article <koningj.37.724430077@risc1.unisa.ac.za> koningj@risc1.unisa.ac.za (Gert Koning) writes:
>I want to be able to login from home via modem to our RS/6000. (This I can 
>do already). I should then give it a command, logout and it should dial me 
>back, giving me the login screen again. This will enable me to work from 
>home while my employer pays the phone costs.
>
I do this with uucp but I dont see why it shouldn't work as well
with cu. First you need to have cu set up so you can issue a command
like 'cu callhome', which will call your home system from work. Once
this is done all you need to do is log into the work system and type
'sleep 10; cu callhome &'. This should give you 10 seconds to log out
and get your modem/getty/whatever ready to accept the incomming call.

John H. Wadsworth            BABSS           wadswort%babss.UUCP@cs.yale.edu
(800) 677-8549 voice    (203)481-0276 fax      {uunet,yale}!babss!wadswort
From: mcharity@lcs.mit.edu (Mitchell N Charity)
Newsgroups: comp.unix.aix
Subject: AIX setuid/setgid security hole
Date: 17 Dec 92 19:25:58 GMT
Organization: MIT Laboratory for Computer Science

Bug:  setuid/setgid do not properly limit authority.
Example:
   A program running as root,
   after successfully calling setgid(100) and setuid(100),
   thus allegedly adopting guest/usr authority,
   can still delete files from root/security owned directories.
Security impact:
   User written programs which begin running as root,
   (in my case, a /bin/login replacement),
   and appear to safeguard the filesystem by becoming a unprivileged user,
   may in fact still have the authority to do significant damage.
Bug status:
  - I have begun the tortuous IBM support process.  No feedback yet.
  - I have heard that a related bug, and an associated workaround,
   were posted to this list.  Also that they were reported to IBM and CERT,
   and ignored by both.  ?

Demo:

Under AIX 3.2.1:
% more program.c
#include <unistd.h>
#include <stdio.h>
main (int argc,char**argv) {
  if( setgid( 100 ) <0) { perror("setgid failed"); exit(1); }
  if( setuid( 100 ) <0) { perror("setuid failed"); exit(1); }
  execv(argv[1],&(argv[1]));
  perror("execv failed");
  exit(1);
}
% cc -o program program.c
% su
# mkdir          foodir
# chown root     foodir
# chgrp security foodir
# chmod 775      foodir
# touch          foodir/foofile
# chown root     foodir/foofile
# chgrp security foodir/foofile
# chmod 775      foodir/foofile
# /bin/ls -dl foodir
drwxrwxr-x   2 root     security     512 Dec 17 13:14 foodir
# /bin/ls -l  foodir/foofile
-rwxrwxr-x   1 root     security       0 Dec 17 13:14 foodir/foofile
# ./program /bin/rm -f foodir/foofile
# /bin/ls -l  foodir/foofile
foodir/foofile not found

Note: 
 If chmod 755 foodir, rather than 775, then permission is correctly denied.
Newsgroups: comp.unix.aix
From: christes@socrates.umd.edu (Skip Christensen)
Subject: Re: Sound playback capability for RS 6000/520 and 220?
Organization: University of Maryland University College
Date: Sun, 20 Dec 1992 16:56:29 GMT

I know there is an audio card available for the 6000.  There
is also a manual that addresses the characteristics of the
card and programming, e.g., mulaw, alaw, etc.

Card can handle stereo.  Need to get a copy of that manual -
writing device drivers (think that's the name).


Newsgroups: comp.unix.aix
From: scotte@cdsac.uucp (L. Scott Emmons)
Subject: Re: Pretty print with InfoExplorer
NntpPostingHost: cdsac
Date: 11 Dec 1992 16:20:32 GMT
Organization: CableData (U.S. Computer Services), Sacramento, CA

In article <09DEC92.18608093.0035@music.mus.polymtl.ca> "Gaetan Lord, Ecole Polytechnique de Montreal" <DG03@music.mus.polymtl.ca> writes:
>Hi RS/6000 user
>
>Here's the problem.
>
>I Have a Hp Laserjet serie II and a Hp laserjet serie II with
>postscript emulation cartridge accessible via a RS/6000. I would like
>to produce "pretty print" of an AIXwindows InfoExplorer document.
>
>How can i configure InfoExplorer to use those devices.

Well, from the "Customize" > "Defaults" editor, you can setup to
pretty print to just about anything. I use this to print to laserjet
II emulation (in the Pretty Print field):

	troff Thplj|hplj|qprt dp P<pcl4queue>

For a postscript queue, this should be something like:

	troff Tpsc|psc|qprt dp P<psqueue>

and I use "<psqueue>" in the Artwork Printer field, a queue which has
a backend that runs 'ghostscript' to convert the postscript art to
hplj, then dumps to the hplj queue (since we don't have a postscript
printer, which is 'required' for artwork prints).

You may have to set the "Customize" > "Preferences" editor to do
pretty prints by default.

>
>There is no phototypesetter devices for a Hplj without a K cartridge.

Actually, you can make it so that you don't need the K cartridge. Just
run the "no_cart" shell script in "/usr/lib/font/devhplj". Printing
via the 'hplj' filter is a bit slow, as it has to read, load, and send
zillions of font bitmaps, but it works very well...

 
			   L. Scott Emmons
		      CableData  Research Center
		     csusac.csus.edu!cdsac!scotte
				KC6NFP
Newsgroups: comp.unix.aix
From: kehne@austin.ibm.com ()
Subject: Re: Can't add a Maxtor XT-8760S to 520. Why?
Originator: kehne@kehne.austin.ibm.com
Date: Sat, 19 Dec 1992 16:10:31 GMT
Organization: IBM Austin


IBM diagnostics should not be run against OEM drives.
From: bzs@world.std.com (Barry Shein)
Newsgroups: comp.unix.aix
Subject: Need to grep all man pages (AIX 3.2) -- Can it be done?
Date: 21 Dec 92 06:24:02 GMT
Distribution: comp
Organization: The World


I need to grep all manual pages on AIX 3.2, the need is bona-fide and
cannot be gone into here. I don't care if the pages are separated etc,
just so that every bit of text is searched (grep is not particularly
necessary, the strings involved are fixed, tho that's the obvious way
and I doubt that's part of the solution), and I can ultimately say
that this or that string occurred on this or that man page, even if
it's a bit of work, that's ok.

Is there any way to do this?

Thanks.


-- 
        -Barry Shein

Software Tool & Die    | bzs@world.std.com          | uunet!world!bzs
Purveyors to the Trade | Voice: 617-739-0202        | Login: 617-739-WRLD
From: iwirs-1@iwi.unibe.ch (Rene Doenni)
Newsgroups: comp.unix.aix
Subject: file-extension "shar" ?
Date: 15 Dec 92 10:29:38 GMT

I've got a file "notes.rs6000.shar" which I can't read. What does the
extension "shar" mean and if it's a compressed format, how do I uncompress
it ? Thanks for any information.

Rene Doenni, University of Berne, Department of information systems
E-Mail : iwirs-1@iwi.unibe.ch
Newsgroups: comp.unix.aix
From: peppe@ipgaix.unipg.it (G. Vitillaro)
Newsgroups: comp.sys.protocols.time.ntp,comp.unix.aix
Subject: xntp3 on AIX/370 1.2.1 (PL 1400)
Summary: xntpd (of xntp3) hang under AIX/370 1.2.1 (PL1400)
Keywords: AIX/370, xntp3, hang
Date: 20 Dec 92 20:30:07 GMT
Organization: Universita' di Perugia

I'm trying to run xntp3 under AIX/370 1.2.1 (PL 1400).

I know that this system is going, but we will have it here
at least for the next six months here and I would like to run
xntpd under it.

I compiled xntpd succesfully (so seem at least), but it seems
to hang. What I can see is that it seems that xntpd is
not receiveing any packet or at least <getrecvbufs> is
always called without anything to do.

More I tried ntpq and xntpdc with other servers and they
work but I cannot obtain any answer from the xntpd running
under AIX/370 (both from the same host than from others).

I compiled xntpd with bsdcc (it is anologous to the one in
AIX/6000: BSD compatibility include files and libs at
the level 4.3 I believe).

One of major doubt is about the fact that xntpd use ASYNC
I/O on udp socket by default. I'm not completely sure AIX/370
can handle them (fcntl man page is not completely clear at
this purpose). I tried to compile xntpd with -DUSESELECT
(as for the Sequent), but it answer to the first few packets,
the hangs again.

So now I'm out of hope: I don't know so deeply udp sockets
to extensively debug xntpd. 

One last think: I tried to define -DNODETACH (I saw something
in ntpd.c suggesting this for Apollo). Same result: hang.

I hope someone in the Network may have better advice than me,
or maybe I'm so lucky someone else already compiled xntpd
for AIX/370 (I don't hope that so much).

If someone "solved" a similar problem for other platforms
and gan give some hint I will be forever gratfully to him.

Regards  G. Vitillaro
-- 
Giuseppe Vitillaro - IBM SEMEA      |  E-Mail : peppe@ipgaix.unipg.it 
University of Perugia Italy         |  06100 Perugia  Phone:+39.75.585-2200
---------------------------------------------------------------------------
All comments/opinions are mine and don't represent those of IBM
From: manmetha@gauss.rutgers.edu (Rajesh Malhotra)
Newsgroups: comp.unix.aix
Subject: SVGA compatible monitors for RS6000 -- Possible?
Keywords: Hardware compatibility, terminfo compatibility.
Date: 17 Dec 92 14:14:43 GMT
Organization: Rutgers Univ., New Brunswick, N.J.


Fellow Aixers,

	Is it possible to use a SVGA monitor as a terminal for the
RS6000? If so, is it possible to run X using such a terminal?

What hardware and terminfo issues need to be resolved to attain the
above?

Any and all help appreciated, Thanx.

Raj.
-- 
===============================================================================
  __  __     .
 /   __/    /                               Raj Malhotra.
/   ( /_   /                                voice : (908)613 4313. 
        __/                                 email : manmetha@gauss.rutgers.edu

===============================================================================
Newsgroups: comp.unix.aix
From: eswu@waterloo.austin.ibm.com (Wu)
Subject: Re: .XSetAuthorization
Date: Tue, 15 Dec 1992 00:56:09 GMT
Organization: IBM Austin

tuc@stormking.com (Scott J Ellentuch) writes:

>	While updating my X11R5 from PPL14 to PPL15 I started to receive
>a warning as such :
>0706-224 WARNING:  Duplicate symbol '.XSetAuthorization'.
>	when it was "ld"ing my libX11.a file.  Has anyone seen this
>and is there a fix?
> ...
>(PS - As I plan to upgrade from 3.1.7 to 3.2.2 soon, are there any 3.2.?
>specific patches that I'll need??)

Did you patch and recompile XOpenDis.c? MIT Public Patch 14 moved the
function XSetAuthorization from file XOpenDis.c to XConnDis.c.

To upgrade to AIX3.2, you will have to patch XConnDis.c because of
changes to networking in AIX3.2. You will not see this patch in a MIT
public fix because it is the MIT X Consortium's policy not to support
new OS's in between MIT major releases (ie, X11R6). Look at sky.README
on export.lcs.mit.edu (anon ftp) in the contrib directory. Also, make
sure you at least have xlc 1.2.0.12 (use lslpp -h xlccmp.obj).



-- 
Eng-Shien Wu (eswu@austin.ibm.com)
IBM Austin, X Server Development
From: mcguire@selway.umt.edu (Charles J McGuire)
Subject: filesystem references
Organization: University of Montana
Date: Thu, 17 Dec 1992 18:26:32 GMT

Some time ago, I think I recall some postings on code that would
find open references to filesystems. Does anyone recall anything
about this?

The problem I'm having is related to some utility programs I
wrote that allow users to mount and unmount cdroms. Occasionally,
references are hung or open somewhere that prevent unmounting
a cdrom ("device already mounted, or can't be unmounted" type
of thing").  A simplest case is where a user has an old shell that is
cd'd into the cdrom filesystem, and someone (maybe even root)
is trying to unmount the cd. I need a way to find out what
open references to a filesystem exist.

Users get scientific data distributed on cd.

Thanks.
 *************************************************************************
( Charlie McGuire              |       Tel.  : (406) 243-4618             )
( Research Sys Mgr             |       Fax   : (406) 243-4076             )
( The University of Montana    |                                          )
( Computer Science Dept        |       E-Mail: mcguire@huckle.cs.umt.edu  )
( SS409                        |                                          )
 *************************************************************************
From: ronald@lowt.phys.tue.nl (Ronald Aarts)
Newsgroups: comp.unix.aix
Subject: xlf preprocessor problems
Date: 16 Dec 92 08:34:13 GMT

We tried to use the precompiler options -P, -Pv, and -Pk (xlf 2.2 and 
Aix 3.2.1). Unfortunately only the "-Pk" produced an executable (after 
invoking /usr/lpp/xlf/bin/fppk). Both other options resulted in:

  xlf: 1501-224 fatal error in /usr/lpp/xlf/bin/fpp: signal 11 received

What can be wrong ??
--
Ronald Aarts
Eindhoven University of Technology  | Internet: ronald@lowt.phys.tue.nl
Physics Department, P.O. Box 513,   |    Phone: +.31.40.474213
5600 MB Eindhoven, The Netherlands  |      Fax: +.31.40.453587
Newsgroups: comp.unix.aix
From: mbrookov@diana.cair.du.edu (Matthew B. Brookover)
Subject: AIX 3.2.3 backup by inode problems
Organization: University of Denver
Date: Thu, 17 Dec 92 00:01:38 GMT

Hi,  I am in rather desperate need of some help with backup by inode in
AIX 3.2.3.  I just upgraded from AIX 3.1.7, where we were doing a backup by
inode with the system up and running.  AIX 3.2.3 seems to have a lot of
problems with this.

Some back ground data:  The system is an RS 6000/550 with 5 Maxtor PO-12s
disks and 2 IBM 400MB disks.  The 2 IBM disks contain the root volume group,
the 5 Maxtor disks are user data and are in separate volume groups.

Under 3.1.7 we never had any problem doing backup by inode on an active file
system,  under 3.2.3 I get errors like these:

backup: The lseek call failed
backup: Cannot read /dev/rhd4 [block -1419576480]: count=1024 got=-1

The block number is always impossibly large or small.

sometimes the backup will fail with the message:

backup: 0511-250 There are more than 32 block read errors from 537214592.
backup: backup: There is an error from which the system cannot recover.
backup: the backup command has ended abnormally.

or this message will come up:

backup: The directory is damaged at inode number 63503.

In all cases the block/inode number will change.  If I unmount the partitions
the backup will run fine.  fsck will also run fine.

I get errors from backup about 1 out of 5 times.

I know that the backup by inode should be ran on an unmounted file system,
but I need to do backups with the system up and I need to do incremental
backups.  Under AIX 3.1.7 I never had any problems.

Did IBM change any thing in backup between 3.1.7 and 3.2.3?

How many people do backup by inode on an active file system? any problems
under 3.2.3 or 3.1.7?

Any help would be greatly appreciated.

thanks

-- 
Matthew B. Brookover
Computing and Information Resources
University of Denver
mbrookov@diana.cair.du.edu
From: raeram@kittyhawk.aero.rmit.OZ.AU (Richard A. Muirden)
Newsgroups: comp.unix.aix
Subject: xdm on RS/6000 AIX 3.2.2 - HELP!!!
Date: 17 Dec 92 08:31:11 GMT
Organization: RMIT Computer Centre
NNTP-Posting-Host: kittyhawk.aero.rmit.oz.au

hi,

I can't seem to get xdm to do anything on our AIX box, either run under
sh/ksh or under X - what do I need to do to get xdm running as the login
screen etc?

any help would be apprieciated!!

-richard
--
Richard Muirden, System Administator, RMIT.Aero. Engineering.. Office: 10.12.26
raeram@kittyhawk.aero.rmit.OZ.AU, s892024@minyos.xx.rmit.OZ.AU 'phone: 660-3142
---------Hopeless Romantic, Fanatic of Shostakovich and "Star Trek" ------------
Xref: sparky comp.unix.aix:12567 news.admin:8754 news.misc:2039
From: cappisk@cuug.ab.ca (Kevin Cappis 283-6333)
Newsgroups: comp.unix.aix,news.admin,news.misc
Subject: c news on aix
Date: 14 Dec 92 22:12:36 GMT
Distribution: na
Organization: Calgary UNIX User's Group



Please post the following article to comp.unix.aix, news.admin, and news.misc:

Subject: C News for AIX 3.2

I have installed C News on an RS6000 running AIX 3.2.  I have also
installed 'rn'.  I downloaded this software from the net.  I tried to
post a test article to a fake newsgroup as suggested in the Managing
UUCP and Usenet.  I get the following error in /usr/share/news/log :

Dec  2 15:45:26.000 tsh - <Dec02.214516.36878@tsh.com> unparsable Date: `Wed, 02 Dec  21:45:16 1992'

This error results from the AIX date not containing the time zone in
field 5 of its output.  So I put a hack in anne.jones to fix this
problem, only to uncover additional problems.

Before I start hacking at the source code, is there version or patch
for C News that will work on AIX?  I looked in the
AIXPDSLIB.SEAS.UCLA.EDU archive but I did not find C News there, only
rn.

Frank - frank@tsh.com,   ....!uu3.psi.com!tsh!frank
Newsgroups: comp.unix.aix
From: mcguire@selway.umt.edu (Charles J McGuire)
Subject: tex on AIX 3.2
Organization: University of Montana
Date: Wed, 16 Dec 1992 22:42:38 GMT

I'm trying to compile TeX3.14 on an AIX 3.2.xx machine.
Can someone tell me what I need to do to get this to
compile. I've tried various flavors of ANSI, bsdcc, etc.

Any help is greatly appreciated.

Thanks. 

 *************************************************************************
( Charlie McGuire              |       Tel.  : (406) 243-4618             )
( Research Sys Mgr             |       Fax   : (406) 243-4076             )
( The University of Montana    |                                          )
( Computer Science Dept        |       E-Mail: mcguire@huckle.cs.umt.edu  )
( SS409                        |                                          )
 *************************************************************************

Newsgroups: comp.unix.aix
From: ayrjola@hut.fi (Ari Yrjl)
Subject: Re: zoo on AIX?
Organization: Helsinki University of Technology, Finland
	<1gt0onINNk34@cs.widener.edu>
Date: 19 Dec 92 22:49:39


I got zoo v2.1 compiled by adding following target to makefile:

 rs6000:
       $(MAKE) CFLAGS="-c $(OPTIM) -DANSI_HDRS -DGENERIC -D_XOPEN_SOURCE -D_POSIX_SOURCE" $(TARGETS)


With that -DGENERIC option compiled zoo lacks some features (like
cannot create dir when extracting) but at least it works for
occasional need for zoo.


--
                     / /  most stupid
   ayrjola@hut.fi   / /   dinosaurs
___________________/ /    ought to starve
--------------------'     
Newsgroups: comp.unix.aix,comp.protocols.nfs
From: simon@mmpe.mineral.ualberta.ca (Simon Tortike)
Subject: Re: Connecting DOS box to RS6K (AIX)
Organization: University Of Alberta, Edmonton Canada
Distribution: usa
Date: Sat, 12 Dec 1992 05:58:46 GMT

scornd4@solomon.technet.sg (Ong Hian Leong) writes:

>IBM has a product that is installed on the PC giving TCP/IP and NFS and
>X11 links to the RS6ks. You'll need a supported Ethernet card (3Com is
>supported). 

If you are not using OS/2 (i.e., you are using DOS or Windows or both),
I heartily recommend Beame and Whiteside's product, which has TCP/IP
and NFS support, with several other utilities (talk, ftp, telnet, etc).
The best thing is the price, with a hefty educational discount. An
ethernet card is presupposed, of course. Note that it does not include
any X-Window display server.
--
Simon Tortike                       | tel     : 403/492-3338
Asst. Prof. of Petroleum Engg.      | fax     : 403/492-3409
Dept of Min-Met-Pet Engg.,          |
University of Alberta,              | Internet: simon@mmpe.mineral.ualberta.ca
Edmonton, AB, CANADA T6G 2G6.       | 
From: terryh@hpnmdla.sr.hp.com (Terry Haynes)
Date: Tue, 15 Dec 1992 17:41:27 GMT
Subject: Re: file-extension "shar" ?
Organization: Hewlett-Packard, Santa Rosa, CA
Newsgroups: comp.unix.aix

Ok folks, for productivities sake:

How do I play my music cd in my new 7210-001 CD drive.  It's got a
head phone jack, and a volume knob.  Our SUN Sparc 10 came with
a demo program that acted as the controls.  It has a play button,
a volume slider, and selection controls.  It was pretty nice.

Any ideas?

Terry (It's noisy here, it helps me concentrate, ...)
Newsgroups: comp.unix.aix
From: dwight@geohub.gcn.uoknor.edu (Dwight D. Moore)
Subject: User resource limits
Originator: usenet@kittyhawk.ecn.uoknor.edu
Date: Fri, 18 Dec 1992 15:22:53 GMT
Reply-To: dwight@geohub.gcn.uoknor.edu
Organization: Geosciences Computing Network, Univ. of Oklahoma

What are the limits (setable limits, not those defined in 
/etc/security/limits) of the user account resources:
	stack
	data
I can only set the stack up to 65536 and data to 524288.
The data limits the user to 260+ MB, but our modelers
need more (300MB or more) to do large model runs.
I haven't found a way to get above these limits.
----------------------------------------------------------------------------
Dwight D. Moore
Geosciences Computing Network
University of Oklahoma

dwight@geohub.gcn.uoknor.edu (129.15.40.10)
These opinions do not necessarily represent the opinions of OU or the GCN.
----------------------------------------------------------------------------