[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

BuildDisk(1)
Systems Affected:NeXT running any release upto 1.0a.
Problem: The "BuildDisk" application is executable by all users. Allows a user to gain root access.
Solution: Change the permissions on the "BuildDisk" application allowing only root to execute it. This can be accomplished with the command: 
  # chmod 4700 /NextApps/BuildDisk
To remove "BuildDisk" from the default icon dock for new users, do the following:

1. Create a new user account using the UserManager application.
2. Log into the machine as that new user.
3. Remove the BuildDisk application from the Application Dock by dragging it out.
4. Log out of the new account and log back in as root.
5. Copy the file in ~newuser/.NeXT/.dock to /usr/template/user/.NeXT/.dock (where ~newuser is the home directory of the new user account)
6. Set the protections appropriately using the following command: # chmod 555 /usr/template/user/.NeXT/.dock
7. If you wish, with UserManager, remove the user account that you created in step 1.

In release 2.0, the BuildDisk application will prompt for the root password if it is run by a normal user.


Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.