#-----------------------------------------------------------------------------
#
# check for patch 167 and the md5 on it.  It patches a security hole in
# mount_dos for floptical drives.
#

$file       = '/usr/etc/mount_dos';
$md5{$file} = '7c0296acf1c5661b95055c5c60685153';

&pcheck($file);

if ((-u $file) && (-x _) && !$versions{'patchSG0000167'} &&
    (&getmd5($file) ne $md5{$file})) {
  &report("WARNING: $file vulnerability\n",
    "  To fix: get patch 167 from the TAC. Only fix this if you are\n",
    "  using mount_dos.  There's a hole in it whereby users can\n",
    "  make SUID things on DOS disks, and thereby obtain root access.\n\n");
  &warn;
  }
else {
  &report("INFO:  mount_dos is not SUID.  This is good.\n");
  &passed;
  }

exit 0;
  
