Re: Bitkeeper licence issues

[Tom Rini]

On Tue, Mar 19, 2002 at 03:25:02PM -0800, Larry McVoy wrote:
> On Tue, Mar 19, 2002 at 11:06:32PM +0100, Pavel Machek wrote:
> > >  > > Pavel, the problem here is your fundamental distrust.  
> > >  > By giving me binary-only installer you ask me to trust you. You ask me
> > >  > to trust you without good reason [it only generates .tar.gz and
> > >  > shellscript, why should it be binary? Was not shar designed to handle
> > >  > that?], and that's pretty suspect.
> > > 
> > >  Bitmover doing anything remotely suspect in an executable installer
> > >  would be commercial suicide, do you distrust realplayer too?
> > 
> > Actually, the installer contains security hole allowing any user to
> > overwrite any file on system if you install it as root with simple
> > symlink. 
> 
> Come on Pavel, in order to make this happen, you have to
> 
> 	a) run the installer as root
> 	b) know the next pid which will be allocated
> 	c) put the symlink in /tmp/installer$pid

I hate to jump in here (really I do) but 'a' probably happens alot.  All
of the recommended locations are system directories.  As for 'b' and
'c', I think those are considered trivial things to do, since this would
be a relativly easy thing to expliot (search some of the security list
archives, this isn't quite as easy as the buffer overflow on x86
problem, but still trivial).

> I'll grant you this is something we can trivially make go away as an 
> issue, and we have, but it's mostly to make you go away as an issue,
> not because we believe for one second this is a realistic problem.

But yes, this is a trivial problem which is now fixed.  And in the grand
scheme of things, there'll be more important fixes in the next version
of BK than the possibility of overwriting files at installtime.

-- 
Tom Rini (TR1265)
http://gate.crashing.org/~trini/