[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2004Q4 2003-12-03T22:14:45Z 2003-12-03T22:14:45Z kristerw kristerw 2003-12-03T22:14:45Z urn:sha1:f0b2a4f849f4f8d5d7b6da4b75f7384b961576dd 2003-07-21T17:24:16Z martti martti 2003-07-21T17:24:16Z urn:sha1:1f2c18f3ece9c1206affa3967c00c459a2bb0260 2003-07-17T22:50:55Z grant grant 2003-07-17T22:50:55Z urn:sha1:016914e7f9e5498e9fdf870d12d99bfeb4e66d4a 2003-06-23T13:55:24Z agc agc 2003-06-23T13:55:24Z urn:sha1:343e10f41934b0fa96db7d1829fbf4d67c240904 TCX is a system designed for the transparent decompression, execution and recompression of executables under Unix. It allows configuration options such as the type of compression system used (compress(1), gzip(1), your own local system etc), timeouts between recompressions, and emergency directories in case a decompression fails from shortage of disk space. The system is designed with a reasonable amount of robustness in mind, such as in the event of system crashes, or races on trying to uncompress, compress or execute something. This software is quite old (vintage 1993-94), and some things have moved on since then. In particular, untcx is setuid root. I have done a minor security audit, but anyone installing this software is invited to conduct one for themselves. =========================================================================== $NetBSD: MESSAGE,v 1.2 2002/09/12 19:37:07 wiz Exp $ WARNING - this package contains a setuid root executable called untcx, which was written in 1994, and contained calls to getwd(3), sprintf(3), strcpy(3) and strcat(3). I've done a minor audit of the code, and have fixed the above functions with calls to safer alternatives, but you may wish to delete this package from your own systems until you have carried out your own audit. ===========================================================================