From owner-man-jp-reviewer@jp.freebsd.org  Tue May  9 01:30:44 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id BAA60678;
	Tue, 9 May 2000 01:30:44 +0900 (JST)
	(envelope-from owner-man-jp-reviewer@jp.FreeBSD.org)
Received: from tasogare.imasy.or.jp (mistral@tasogare.imasy.or.jp [202.227.24.5])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id BAA60671
	for <man-jp-reviewer@jp.freebsd.org>; Tue, 9 May 2000 01:30:44 +0900 (JST)
	(envelope-from mistral@imasy.or.jp)
Received: from mistral.wind.prv (isdnb18.imasy.or.jp [202.227.24.146])
	by tasogare.imasy.or.jp (8.9.3+3.2W/3.7W-tasogare/smtpfeed 1.04) with ESMTP id BAA25867
	for <man-jp-reviewer@jp.freebsd.org>; Tue, 9 May 2000 01:30:43 +0900 (JST)
	(envelope-from mistral@imasy.or.jp)
Message-Id: <200005081630.BAA25867@tasogare.imasy.or.jp>
Received: (from yohta@localhost)
	by mistral.wind.prv (8.9.3/3.7Wpl2-990626) id BAA24780;
	Tue, 9 May 2000 01:13:59 +0900 (JST)
Date: Tue, 9 May 2000 01:13:59 +0900 (JST)
From: mistral@imasy.or.jp (Yoshihiko SARUMARU)
To: man-jp-reviewer@jp.freebsd.org
In-Reply-To: Your message of "Mon, 8 May 2000 09:59:00 -0400".
	<200005081357.JAA87572@earth.advok.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
X-Mailer: mnews [version 1.22PL1] 2000-02/15(Tue)
Reply-To: man-jp-reviewer@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: man-jp-reviewer 2422
Subject: [man-jp-reviewer 2422] Re: (man2) issetugid.2
Errors-To: owner-man-jp-reviewer@jp.freebsd.org
Sender: owner-man-jp-reviewer@jp.freebsd.org
X-Originator: mistral@imasy.or.jp

$B!!1n4]$G$9!#(B

2000-05-08($B7n(B) 22:59:00.$B:"!"(Bhiro@mail.advok.com$B$5$s$O=q$-$^$7$?!#(B

> $B32$9$k(B(taint) -> $B1x@w(B
> http://www.jp.FreeBSD.org/man-jp/docs/wordlist.txt
> $B$3$3$K$O!"F~$C$F$$$J$+$C$?$N$G$9$,1x@w$NJ}$,0lHLE*$@$H(B
> $B;W$o$l$k$N$G(B($B$?$@!"8D?ME*$K$O$3$l$r8+$k$N$O(B 2 $B2sL\$G$9(B
> $B$,!"$_$?$N$,(B ruby $B$N(B ML $B$G!":n<T$N$^$D$b$H$5$s$J$I$,(B
> $B$3$N8@MU$r;H$C$F$$$?$b$N$G$9$+$i!D(B)$B!#(B

  $B1x@w$GE,Ev$@$H;W$$$^$9!#(B
  $B%i%/%@K\$G$b8+$?$h$&$J5$$O$7$^$9$,!"Dj$+$G$O$"$j$^$;$s!D!D!#<j(B
$B85$N(B Perl4 $BMQ(B Texinfo $B$N!V(BSetuid $B%9%/%j%W%H!W$N9`$G$O!V1x$l$?!W(B
$B$HLu$5$l$F$$$k$h$&$G$9!#$7$+$786K\$,<j85$K$J$$$N$G!"(Btaint $B$NLu$J(B
$B$N$+$I$&$+$O$o$+$j$^$;$s(B :)

  $B$7$+$7$3$s$J$b$N$^$G%7%9%F%`%3!<%k$G<BAu$7$F$7$^$&$H$O!"(B
OpenBSD $B$*$=$k$Y$7!#(B


> -$B%W%m%;%9$,32$5$l$F$$$k$N$O!"(Bsetuid
> +$B%W%m%;%9$,1x@w$5$l$F$$$k$N$O!"(Bsetuid
>  $B%S%C%H$^$?$O(B setgid
>  $B%S%C%H$N$I$A$i$+$,@_Dj$5$l(B ($B$=$7$F!"7k2L$H$7$F(B
>  $BDI2C$NFC8"$,M?$($i$l(B) $B$F$$$k(B
>  .Xr execve 2
>  $B%7%9%F%`%3!<%k$N7k2L$H$7$F$=$N%W%m%;%9$,:n@.$5$l$?>l9g!"(B
> -$B$^$?$O<B9T$r3+;O$7$F0J9_!"%j%"%k!"%$%U%'%/%F%#%V!"(B
> +$B$^$?$O<B9T$r3+;O$7$F0J9_!"<B%f!<%6(BID$B!"<B8z%f!<%6(BID$B!"(B
>  $B$^$?$OJ]B8$5$l$?%f!<%6(B ID $B$^$?$O%0%k!<%W(B ID $B$N$$$:$l$+$r(B
> -$B$=$N%W%m%;%9$,JQ99$7$F$$$k>l9g$G$9!#(B
> +$B$=$N%W%m%;%9$,JQ99$5$l$F$$$k>l9g$G$9!#(B

  $B$J$s$+$A$g$C$H0z$C3]$+$C$?$N$G!"0J2<$N$h$&$K$7$F$_$^$7$?!#$$$+(B
$B$,$G$7$g$&$+!#(B

setuid $B$^$?$O(B setgid $B%S%C%H$N$I$A$i$+$,@_Dj$5$l$?%W%m%;%9$r(B
.Xr execve 2
$B%7%9%F%`%3!<%k$G<B9T$7$?(B ($B$=$7$F7k2L$H$7$FDI2C$NFC8"$,M?$($i$l$?(B) $B>l9g!"(B
$B$"$k$$$O%W%m%;%9$N!"<B(B, $B<B8z(B, $BJ]B8$5$l$?!"%f!<%6$^$?$O%0%k!<%W(B ID $B$N(B
$B$$$:$l$+$,<B9T8e$KJQ99$5$l$?>l9g!"$=$N%W%m%;%9$O1x@w$5$l$F$$$k$H(B
$B8+$J$5$l$^$9!#(B

$B86J8(B:
     A process is tainted if it was created as a result of an execve(2) system
     call which had either of the setuid or setgid bits set (and extra privi-
     leges were given as a result) or if it has changed any of it's real, ef-
     fective or saved user or group ID's since it began execution.

$B$"$H!"(B

> $BFC$K!"(B
> .Xr getenv 3
> $B$+$i$N7k2L$O!"A`:n$r@)8f$9$k$?$a$K;HMQ$5$l$F$$$k>l9g$O5?$$$r;}$C$F8+$k(B
> $BI,MW$,$"$j$^$9!#(B

$B$G$O!"(B

$B$+$i$N7k2L$r!"A`:n$r@)8f$9$k$?$a$K;HMQ$9$k>l9g$K$O5?$$$r;}$C$F8+$k(B
$BI,MW$,$"$j$^$9!#(B

$B$+$J$!!"$H;W$$$^$7$?!#(B

--
$B1n4](B($B5l@+(B: $BB@ED(B)$BK'I'(B (Yoshihiko SARUMARU)
mail: mistral@imasy.or.jp	web: http://www.imasy.or.jp/~mistral/
