Bug 18658 – possible problem with $HOME/.terminfo + set[gu]id programs

Bug 18658 - possible problem with $HOME/.terminfo + set[gu]id programs

Summary:	possible problem with $HOME/.terminfo + set[gu]id programs

Status:	CLOSED RAWHIDE

Aliases:	None

Product:	Red Hat Linux
Classification:	Retired
Component:	ncurses (Show other bugs)
Sub Component:
Version:	7.0
Hardware:	i386 Linux

Priority	medium Severity medium
Target Milestone:	---
Target Release:	---
Assigned To:	Bernhard Rosenkraenzer
QA Contact:	Aaron Brown
Docs Contact:

URL:
Whiteboard:
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2000-10-08 17:12 EDT by Pekka Savola
Modified:	2007-04-18 12:29 EDT (History)
CC List:	1 user (show)

See Also:
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2000-10-09 05:17:37 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Pekka Savola 2000-10-08 17:12:53 EDT

OpenBSD people have issued a fix a couple of days ago for libcurses which
makes it ignore terminal descriptions in $HOME/.terminfo as well as
TERMCAP.

I looked at this briefly, and the the basic idea behind it seems to be
applicable for curses 4.0-5.1 (at least) on RHL.  I'm not sure if this is strictly 
necessary, but probably would be worth checking out.

ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/027_curses.patch

Comment 1 Bernhard Rosenkraenzer 2000-10-09 05:17:34 EDT

We're aware of the problem and its fix (it's somewhat different from the BSD
one); the fixed package will be released later today.

Comment 2 Bernhard Rosenkraenzer 2000-10-11 08:46:37 EDT

The fixed package is in rawhide; the updates are (still) waiting for QA
approval.

Note You need to log in before you can comment on or make changes to this bug.