Date: 26 Nov 2003 12:35:06 -0500 From: Lowell Gilbert <freebsd-security-local@be-well.ilk.org> To: Mike Tancsa <mike@sentex.net> Cc: freebsd-security@freebsd.org Subject: Re: perms of /dev/uhid0 Message-ID: <44u14rnid1.fsf@be-well.ilk.org> In-Reply-To: <6.0.1.1.0.20031126112219.045d4668@209.112.4.2> References: <6.0.1.1.0.20031126101602.06e8e9f0@209.112.4.2> <20031126102631.L16087@cithaeron.argolis.org> <6.0.1.1.0.20031126104757.034e1988@209.112.4.2> <6.0.1.1.0.20031126112219.045d4668@209.112.4.2>
index | next in thread | previous in thread | raw e-mail
Mike Tancsa <mike@sentex.net> writes:
> if (!(pwent = getpwnam("nobody")))
> {
> fprintf(stderr, "There must be a user called nobody
> for this program to work!");
> exit(1);
> }
It would be safer to create a different user specifically for this
purpose. Otherwise, something else running as nobody might have
access to more privileges than it was intended for...
home |
help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44u14rnid1.fsf>