Исходное сообщение
"Уязвимость в пакетном менеджере GNU Guix" Отправлено Andrey Mitrofanov_N0, 18-Окт-19 10:39
> там 777 чтоль было? 1777. " Until now, /var/guix/profiles/per-user was world-writable [...] " --https://guix.gnu.org/blog/2019/insecure-permissions-on-profi.../ " This issue was initially reported by Michael Orlitzky for Nix (CVE-2019-17365). " == " its parent directory. That parent directory is shared by all users on the system, and as a result, is world-writable (so that everyone can create his own subdirectory thereof). This is enforced by the installation script scripts/install-multi-user.sh...   _sudo "to make the basic directory structure of Nix (part 2)" \     mkdir -pv -m 1777 /nix/var/nix/{gcroots,profiles}/per-user " --https://www.openwall.com/lists/oss-security/2019/10/09/4

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	>> там 777 чтоль было? > 1777. > " Until now, /var/guix/profiles/per-user was world-writable [...] " > --https://guix.gnu.org/blog/2019/insecure-permissions-on-profile-directory-cve-2019-18192/ > " This issue was initially reported by Michael Orlitzky for Nix (CVE-2019-17365). > " > == > " > its parent directory. That parent directory is shared by all users on > the system, and as a result, is world-writable (so that everyone can > create his own subdirectory thereof). This is enforced by the > installation script scripts/install-multi-user.sh... > _sudo "to make the basic directory structure of Nix (part > 2)" \ > mkdir -pv -m 1777 /nix/var/nix/{gcroots,profiles}/per-user > " --https://www.openwall.com/lists/oss-security/2019/10/09/4
	Введите код, изображенный на картинке: