The patch below fixes a very bug security hole that allows any user to overwrite any file on your system using rdist. This patch should work with rdist 6.0.0 and 6.1beta.0. This patch is NOT needed for 6.1beta.1 and later. mike *** rdist.c.ORIG Tue Mar 16 13:38:43 1993 --- rdist.c Tue Mar 16 13:38:44 1993 *************** *** 111,116 **** --- 111,119 ---- exit(1); } + if (dosetreuid(0, userid) != 0) + exit(1); + while ((c = getopt(argc, argv, optchars)) != -1) switch (c) { case 'l': *************** *** 217,225 **** if (nflag && IS_ON(options, DO_VERIFY)) fatal("The -n flag and \"verify\" mode may not both be used."); - - if (dosetreuid(0, userid) != 0) - exit(1); /* * Don't fork children for nflag --- 220,225 ----