Stay Secure with the Latest Linux Advisories

security advisoryslackwarepermissions fix

Slackware 12.2 SSA:2009-111-02 Important udev Permissions Update

Updated udev packages are available for Slackware 12.2, and -current to fix a serial device ownership regression in 12.2, adjust the perms on /dev/rtc0, and make sure that the /dev/root symlink is properly created. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] udev reissued for 12.2/current (SSA:2009-111-02) Updated udev packages are available for Slackware 12.2, and -current to fix a serial device ownership regression in 12.2, adjust the perms on /dev/rtc0, and make sure that the /dev/root symlink is properly created. Here are the details from the Slackware 12.2 ChangeLog: +--------------------------+ patches/packages/udev-141-i486-2_slack12.2.tgz: Fixed a regression with serial/dialout device ownership. Slackware 12.2 uses the 'uucp' group for these devices, but the newer version of udev has changed them to 'dialout', leading to log errors and an incorrect group ownership for serial devices since the 'dialout' group does not exist on Slackware 12.2. This update changes the serial device group ownership back to 'uucp'. Thanks to Alexander Pravdin for the fast bug report. Changed the permissions on the real time clock (/dev/rtc0) so that all users can read it. Modified rc.udev so that the /dev/root symlink is created. Thanks to Piter Punk! +--------------------------+ Here are the details from the Slackware -current ChangeLog: +--------------------------+ a/udev-141-i486-2.tgz: Changed the permissions on the real time clock (/dev/rtc0) so that all users can read it. Modified rc.udev so that the /dev/root symlink is created. Thanks to Piter Punk! +--------------------------+ Where to find the new packages: +-----------------------------+ HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading directly from ftp.slackware.com. Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donatingadditional FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 12.2: ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/udev-141-i486-2_slack12.2.tgz Updated package for Slackware -current: MD5 signatures: +-------------+ Slackware 12.2 package: fdbf627e259420d39313888873f9dcf8 udev-141-i486-2_slack12.2.tgz Slackware -current package: cd8596667b978e1ec6e221f48c3cb224 udev-141-i486-2.tgz Installation instructions: +------------------------+ Upgrade the package as root: # upgradepkg udev-141-i486-2_slack12.2.tgz Restart udev: # /etc/rc.d/rc.udev restart +-----+ . Fortify your Slackware 12.2 platform by implementing udev patches that rectify concerns related to device ownership and permission settings.. Slackware Updates, Udev Fixes, Device Ownership, Linux Permissions. . Severity: Important. LinuxSecurity.com Team

Apr 22, 2009 •Important Slackware