Bugtraq mailing list archives
Re: Security risk with powermanagemnet on Solaris 2.6
From: lej () ALGO NET (Lars-Erik Johansson)
Date: Fri, 17 Jul 1998 14:12:52 +0200
On Thu, 16 Jul 1998, Ralf Lehmann ralfl () darwin muc de wrote:
Recently we found a security risk caused by powermanagement on Solaris 2.6. I am pretty sure that it exists on Solaris 2.5 too, though I haven't tested it.
Come to think of it I think I saw that exact behaviour in 2.5 too.
I haven't found a bugdescription or patch from sun. The only workaround is not to use Powermanagement with a desktop. But who is using powermanagement anyway?
I've been usin powermanager on my sparc at home for 2-3 years now. Very useful when you want to switch off the noise without having to close all the applications. I have another interesting aspect of Powermanager. In solaris 2.6 powermanager is now installed by default including the setuid program usr/openwin/bin/sys-suspend which can be used by any user to suspend the machine and turn off the power. I think this is scary... /lej //// | Dyslexics | |--00 | of the world | C ^ | UNTIE! | \ ~/ ~~~|~~~~~~~~~~~ | |-----3
Current thread:
- Re: Security risk with powermanagemnet on Solaris 2.6 Lars-Erik Johansson (Jul 17)
- Re: Security risk with powermanagemnet on Solaris 2.6 Casper Dik (Jul 21)
- <Possible follow-ups>
- Re: Security risk with powermanagemnet on Solaris 2.6 Robert Sink (Jul 17)
- Re: Security risk with powermanagemnet on Solaris 2.6 Brad Powell (Jul 20)