MDKSA-2003:031-1
- Nom du paquet
- usermode
- Date
- 2003-03-14
- Advisory ID
- MDKSA-2003:031-1
- Affected versions
- 8.1 i586 , CS2.1 i586 , 8.1 i586 , 8.2 i586 , MNF8.2 i586 , 8.2 i586
Problem description
The /usr/bin/shutdown command that comes with the usermode package can be executed by local users to shutdown all running processes and drop into a root shell. This command is not really needed to shutdown a system, so it has been removed and all users are encouraged to upgrade. Please note that the user must have local console access in order to obtain a root shell in this fashion. Update: The previous updated packages did not properly fix the problem. The pam files that allow a (physically) local user to shutdown were not removed. This has been corrected.
Updated packages
8.1 i586
fa3cb6330b63f66306079dd40a16c2fe ia64/8.1/RPMS/usermode-1.42-8.2mdk.ia64.rpm 3429d2aed693326b80896fc6c8725122 ia64/8.1/SRPMS/usermode-1.42-8.2mdk.src.rpm
CS2.1 i586
db92eb539562ba46c518b27e5beea665 corporate/2.1/RPMS/usermode-1.55-8.2mdk.i586.rpm 0b6a38da4dcad1a0fc5eaefa60495f56 corporate/2.1/RPMS/usermode-consoleonly-1.55-8.2mdk.i586.rpm c0e297b0cb1b61fbbdb158b60a5dba6d corporate/2.1/SRPMS/usermode-1.55-8.2mdk.src.rpm
8.1 i586
9db8f2fd47ce931b5562085a1f01d48b 8.1/RPMS/usermode-1.42-8.2mdk.i586.rpm 3429d2aed693326b80896fc6c8725122 8.1/SRPMS/usermode-1.42-8.2mdk.src.rpm
8.2 i586
1700dd357b1b2771258aba9a1a82519f 8.2/RPMS/usermode-1.44-4.2mdk.i586.rpm 0d611b6402d67cc1902f702c5410c719 8.2/RPMS/usermode-consoleonly-1.44-4.2mdk.i586.rpm 68259b469130f44069a7de0e51bcc191 8.2/SRPMS/usermode-1.44-4.2mdk.src.rpm
MNF8.2 i586
0d611b6402d67cc1902f702c5410c719 mnf8.2/RPMS/usermode-consoleonly-1.44-4.2mdk.i586.rpm 68259b469130f44069a7de0e51bcc191 mnf8.2/SRPMS/usermode-1.44-4.2mdk.src.rpm
8.2 i586
6881cccd3deb138fa16d72f57ee8b491 ppc/8.2/RPMS/usermode-1.44-4.2mdk.ppc.rpm 671d254d4e19f2e39bff9cab4720dcf6 ppc/8.2/RPMS/usermode-consoleonly-1.44-4.2mdk.ppc.rpm 68259b469130f44069a7de0e51bcc191 ppc/8.2/SRPMS/usermode-1.44-4.2mdk.src.rpm