Radix cross Linux

     5         kx 
     5         kx /* begin *
     5         kx 
     5         kx    shadow-4.8.1-short-hostname.patch - login: display short hostname
     5         kx 
     5         kx    shadow-4.8.1-CVE-2005-4890.patch:
     5         kx    ================================
     5         kx      From 0f6a809b7c4c9a8f4adb5b25808dd68000e17aa2 Mon Sep 17 00:00:00 2001
     5         kx      From: mancha <mancha1@hush.com>
     5         kx      Date: Wed, 04 Dec 2013
     5         kx      Subject: restrict "su -c" only when callee is not root
     5         kx 
     5         kx      Shadow 4.1.5 addressed a tty-hijacking vulnerability in "su -c"
     5         kx      (CVE-2005-4890) by detaching the controlling terminal in the non-PAM
     5         kx      case via a TIOCNOTTY request.
     5         kx 
     5         kx      Bi-directional protection is excessive and breaks a commonly-used
     5         kx      methods for privilege escalation on non-PAM systems (e.g. xterm -e 
     5         kx      /bin/su -s /bin/bash -c /bin/bash myscript).
     5         kx 
     5         kx      This patch relaxes the restriction and only detaches the controlling
     5         kx      tty when the callee is not root (which is, after all, the threat vector).
     5         kx 
     5         kx  * end */