Removed the suid-root bit in the default build.

[dump.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index c24dbbbcfaf1625ef3361b4f36263eaad2d73dea..fdabbcc84bc195103a25dda432fcb92ebf6fb2ac 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,4 +1,4 @@
-$Id: CHANGES,v 1.64 2000/06/11 17:26:04 stelian Exp $
+$Id: CHANGES,v 1.66 2000/06/30 08:57:24 stelian Exp $
 
 Changes between versions 0.4b17 and 0.4b18 (released ??????????????)
 ====================================================================
@@ -12,6 +12,19 @@ Changes between versions 0.4b17 and 0.4b18 (released ??????????????)
        to Charles Karney <karney@users.sourceforge.net>
        for the bug report.
 
+3.     Changed a few "panic" into "exit", causing restore to
+       be more stable against some attacks (like the last one
+       reported on Bugtraq, although the last version of restore
+       was not vulnerable - just dumped core). Thanks to
+       Andreas Hasenack <andreas@conectiva.com.br> for reporting
+       the bugs to me.
+
+4.     Removed the suid-root bit on dump and restore in the
+       default build (and generated RPMs). It should be safer
+       now. Users who need the suid-root capabilities in order
+       to make network backups should read first the man page
+       of dump and enable the suid bit manually.
+
 Changes between versions 0.4b16 and 0.4b17 (released June 1st, 2000)
 ====================================================================