patchTiger UNIX security tool - Patches: patch #2447, Do not run check_printcap if...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

patch #2447: Do not run check_printcap if /etc/printcap does not exist.

Submitter:  Ryan Bradetich <rbrad>
Submitted:  Thu 08 Jan 2004 03:45:55 AM UTC
   
 
Category:  Security test Priority:  5 - Normal
Status:  None Privacy:  Public
Assigned to:  jfs Open/Closed:  Closed

Mon 26 Jan 2004 06:58:30 AM UTC, comment #3: 

Ok, I have finally retested this security check:

With /etc/printcap the check runs normally.
Without /etc/printcap these are the messages generated:

# Checking printer configuration files...
--ERROR-- [init006e] `/etc/printcap' does not exist (file src).
--ERROR-- [init006e] `/etc/printcap' does not exist (file infile).

I do not have a problem with this solution assuming this error can be filtered in the tiger.ignore file.

Ryan Bradetich <rbrad>
Group Member
Wed 21 Jan 2004 08:47:09 PM UTC, comment #2: 

I'm not sure this is the best way to fix this, if infile is not available it should be checked through 'haveallfiles' that way a proper error message is generated.

We might want to consider making the printcap definition a config file that is setup through the systems' config also....

I'll change the fix... please retest it.

Javier Fernandez-Sanguino Peña <jfs>
Group administrator
Mon 12 Jan 2004 05:37:03 AM UTC, comment #1: 

This patch was committed to CVS head on 01/11/2004.

Ryan Bradetich <rbrad>
Group Member
Thu 08 Jan 2004 03:45:55 AM UTC, original submission:  

This bug was found by Michael Schleif. 

Simple patch ... Check to see if /etc/printcap is readable before trying to parse it.

Ryan Bradetich <rbrad>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attached Files
file #6709:  check_printcap.patch added by rbrad (504B - application/octet-stream - Patch to verify /etc/printcap exists before parsing it.)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

 

Follow 8 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2005-03-21 jfs StatusWorks For Me None
    Open/ClosedOpen Closed
2004-01-21 jfs CategoryNone Security test
    StatusNone Works For Me
    Assigned torbrad jfs
    Open/ClosedClosed Open
2004-01-12 rbrad Open/ClosedOpen Closed
2004-01-08 rbrad Attached File- Added check_printcap.patch, #2477

Back to the top

Powered by Savane 3.13-aa77.
Corresponding source code