From: Giles Lean <giles@nemeton.com.au>
Date: Mon, 5 May 1997 13:46:37 +0000 (+1000)
Subject: NetBSD hint update
X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?a=commitdiff_plain;h=229e211d257ba41610a1ec7a44c71df962201eb5;p=p5sagit%2Fp5-mst-13.2.git

NetBSD hint update

There is a missing character in hints/netbsd.sh.

Line 51
	case "$osver" in

should be
	case "$osvers" in

Missing this case leads to the functions

	setregid()
	setreuid()
	setrgid()
	setruid()

being used, leading to a security problem on all released versions
of NetBSD.

p5p-msgid: 199705051346.XAA13584@topaz.nemeton.com.au
---

diff --git a/hints/netbsd.sh b/hints/netbsd.sh
index d14dd0b..c508815 100644
--- a/hints/netbsd.sh
+++ b/hints/netbsd.sh
@@ -48,7 +48,7 @@ esac
 # ($<, $>) = ($u, $u); will work (same for $(/$)).  this is because
 # you can not change the real userid of a process under 4.4BSD.
 # netbsd fixed this in 1.2A.
-case "$osver" in
+case "$osvers" in
 0.9*|1.0*|1.1*|1.2_*|1.2|1.2.*)
 	d_setregid="$undef"
 	d_setreuid="$undef"