Knowledge Base

BSPs and drivers

Community resources

Product documentation

Questions?

Security Notice - pppoectl utility incorrectly has suid permission

________________________________________________________________________

Applicable Environment

________________________________________________________________________

Topic: Security Notice - pppoectl utility incorrectly has suid permission
SDP: 6.4.0, 6.4.1, 6.5.0, 6.5.0 SP1
Target: Any supported target

________________________________________________________________________

Recommendation

________________________________________________________________________

The pppoectl utility provided with QNX Momentics 6.4.0 through 6.5.0 SP1 incorrectly has suid permission. This could potentially be used to compromise the security of the system.

The recommended course of action is to remove the suid permission of the binary either in your build file by manually forcing the appropriate permissions or by removing them directly on the target system.

For more information please refer to the following documentation.

http://www.qnx.com/developers/docs/6.5.0/topic/com.qnx.doc.neutrino_utilities/m/mkifs.html

http://www.qnx.com/developers/docs/6.5.0/topic/com.qnx.doc.neutrino_utilities/c/chmod.html

________________________________________________________________________

NOTE: This entry has been validated against the SDP version listed above. Use caution when considering this advice for any other SDP version. For supported releases, please reach out to QNX Technical Support if you have any questions/concerns.

________________________________________________________________________

Related Attachments

None Found

Please contact us with your questions or concerns.