Use lchown instead of chown (security problem of symlinks ownership)

[dump.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index 78e5758af29832e509729ea4da15e6bcc5d09878..98793c81c95fd146eddd226c65525b18add66cad 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,7 +1,16 @@
-$Id: CHANGES,v 1.6 1999/10/13 09:57:12 stelian Exp $
+$Id: CHANGES,v 1.13 1999/11/05 22:02:11 tiniou Exp $
 
-Changes between versions 0.4b7 and 0.4b8 (released ???????????????)
-===================================================================
+Changes between versions 0.4b8 and 0.4b9 (released November 5, 1999)
+====================================================================
+
+1.     Use lchown instead of chown, fixing a possible security problem 
+       when restoring symlinks (a malicious user could use this
+       to deliberately corrupt the ownership of important system files).
+       Thanks to Chris Siebenmann <cks@utcc.utoronto.ca> for detecting
+       this and providing the patch.
+
+Changes between versions 0.4b7 and 0.4b8 (released November 3, 1999)
+====================================================================
 
 1.     Put dump sources under CVS, added Id tags in all files so
        one can use 'ident' on binary files.
@@ -9,6 +18,27 @@ Changes between versions 0.4b7 and 0.4b8 (released ???????????????)
 2.     Added the dump/restore version in the usage text so one can
        easily verify the version he is using.
 
+3.     Small patch from Nuno Oliveira <nuno@eq.uc.pt> which fixes
+       a va_start/va_end problem on linux-ppc (always call va_start
+       va_end in pairs each time we use a vararg function).
+
+4.     Added again the DT_* constants because old libc does not
+       contain them :(. Thanks to Eric Maisonobe <virnet@nat.fr>
+       for submitting the bug report.
+
+5.     Use ext2fs_llseek instead of llseek. With recent e2fsprogs
+       this should enable dumping big (huge) filesystems.
+
+6.     Added the RSH environment variable in order to be able to
+       use a rsh replacement like ssh when doing remote backups (and
+       bypass the security limitations of rcmd). Now you can do remote
+       backups without being root (or making dump setuid root).
+
+7.     Modified again the way dumpdates works. For incremental dumps,
+       we need to read dumpdates even if we are not using 'u' option.
+       Thanks to Bdale Garbee <bdale@gag.com> for his ideas on how
+       this should work.
+
 Changes between versions 0.4b6 and 0.4b7 (released October 8, 1999)
 ===================================================================