Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 29: FEDORA-2018-83a2b2f0e7 low: bash Security Update

fedora
Calendar Grey January 18, 2018
Dist Fedora Esm H88
Fedora 26 has tightened security by restricting access to the rootsh log directory. To apply this update, execute dnf upgrade rootsh.
Fix permissions on rootsh log directory to limit it to root.

Summary

Rootsh is a wrapper for shells which logs all echoed keystrokes and

terminal output to a file and/or to syslog. Its main purpose is the

auditing of users who need a shell with root privileges. They start

rootsh through the sudo mechanism.

Fix permissions on rootsh log directory to limit it to root.

[ 1 ] Bug #1526255 - rootsh log directory is world readable

https://bugzilla.redhat.com/show_bug.cgi?id=1526255

su -c 'dnf upgrade rootsh' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
low
Lowest
Low
Medium
High
Critical

Product: Fedora 26
Version: 1.5.3
Release: 17.fc26
Summary: Shell wrapper for auditing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here