mirror of
https://git.FreeBSD.org/ports.git
synced 2024-10-24 21:01:20 +00:00
b0e70f9c89
software, qualified by the fact that it's setgid games and therefore not dangerous to the system. Many of these buffer overflows aren't classic smashed stacks, but I bet at least one is exploitable :-)
10 lines
613 B
Bash
10 lines
613 B
Bash
#!/bin/sh
|
|
|
|
if [ "$2" = "POST-INSTALL" -o -n "${PACKAGE_BUILDING}" ]; then
|
|
exit 0
|
|
fi
|
|
|
|
/usr/bin/dialog --yesno "SECURITY NOTE: This software contains known locally-exploitable buffer overflows. However since the binaries in question are setgid to the games group, the impact of this vulnerability is believed to be limited to the ability for local users to overwrite score files, saved games, and certain other game data for this and other installed game packages. The wider system security is not believed to be compromised by this problem. Do you wish to install the software anyway?" 12 70 || /usr/bin/false
|
|
|
|
|