Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Security alert for 'sudo' System
Today over at stepwise.com, they posted an article explaining a buffer overrun security hole in 'sudo', which is included with OS X. After you've read the article, you can either download an updated sudo installer, or build it yourself by doing the following in a terminal window (requires an admin account and the developer tools installed):
mkdir build-sudo
cd build-sudo
wget http://www.courtesan.com/sudo/dist/sudo-1.6.3p7.tar.gz
gnutar -xzf sudo-1.6.3p7.tar.gz
cd sudo-1.6.3p7
cp /usr/libexec/config.* ./
./configure --with-password-timeout=0
--mandir=/usr/share/man
--prefix=/usr
make
sudo make install
This update is highly recommended for all users, but especially those with a full-time internet connection and no firewall! ;-)
    •    
  • Currently 2.33 / 5
  • 1
  • 2
  • 3
  • 4
  • 5
  (3 votes cast)
 
[2,207 views]  

Security alert for 'sudo' | 4 comments | Create New Account
Click here to return to the 'Security alert for 'sudo'' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Installer doesn't recognize
Authored by: JugheadsRevenge on May 02, '01 07:09:01PM

I tried to download the installer, and all I got was garbled text. I tried 'Download this link' to no avail. I even went to the website and I still get text. Any ideas/help?

thanks,
Jorge



[ Reply to This | # ]
Fixed it
Authored by: JugheadsRevenge on May 02, '01 07:30:19PM

saw another tip here on the site and drag&droppped the text file on Disk Copy and worked fine.

Jorge



[ Reply to This | # ]
Your forgot the two most important configure arguements!!!
Authored by: Cadre on May 02, '01 11:41:08PM
Remember to add the following options when configuring:
"--with-insults --with-all-insults"

[ Reply to This | # ]
OK, now what?
Authored by: dvanbrunt on May 03, '01 11:05:19PM

Well, I installed the developer tools, and entered all that code. Seemed to be doing something productive, and I assume I'm done.


Now what? Can I delete those directories that were created?

Sorry, I'm new to the command line. BUT I'M TRYING! I really do want to learn this stuff, so I appreciate the help. And even the tongue lashings, when necessary ;^}.



[ Reply to This | # ]