Date:	Wed, 25 Feb 1998 12:35:33 -0800
From:	Dave <dgriffi@ULTRIX6.CS.CSUBAK.EDU>
Subject:      Q2-wrapper make Quake2 behave
To:	BUGTRAQ@NETSPACE.ORG

I was hoping to be able to officially announce this thing when the Linux
Quake2 was updated, but it caught me by surprise and as such, Q2-wrapper
is not quite finished.  Okay... What is it?

Those of you who use Quake2 for Linux are most likely irritated at its
distinctive un-unixlike behaviour.  Q2-wrapper, fixes much of that and
allows individual users to have their own config files, saves, maps,
skins, etc; all while leaving Quake2 blissfully ignorant that it's being
fooled.  The infamous ref_root exploit is thwarted by allowing only
predetermined rendering libs to be used.  This new sloppiness discovered
with Quake2's config files should be fixable.  A release for version 3.10
was not possible due to a bug in the handling of the "basedir" command
line variable.  All is not lost when playing Quake2.  Still, I wish Id
would pay more attention to security.  I'm available, guys.

Expect to see Q2-wrapper in a day or so at Sunsite.


--
David Griffith
dgriffi@ultrix6.cs.csubak.edu