Date: Wed, 06 Sep 1995 11:29:20 -0700 From: Bill Trost <trost@cloud.rain.com> To: Brian Tao <taob@gate.sinica.edu.tw> Cc: freebsd-security@freebsd.org Subject: Re: Do we *really* need logger(1)? Message-ID: <m0sqPDt-00004yC@cloud.rain.com> In-Reply-To: Your message of Thu, 07 Sep 1995 00:36:42 %2B0800. <Pine.SOL.3.91.950906235946.15418C-100000@gate> References: <Pine.SOL.3.91.950906235946.15418C-100000@gate>
next in thread | previous in thread | raw e-mail | index | archive | help
Brian Tao writes:
it dawned on me that logger(1) could be a hacker's dream.
Logger requires no special permissions to run; anyone can run such a
program. Better yet, anyone could run such a program anywhere on the
Internet, so syslogd(8) can also be used as a remote disk-filling
service. (And, since it's UDP-based, you can't tcp-wrap it...).
Since syslogd runs as root....
Gads, why? Require that files specified in syslog.conf be writeable
by user syslog, and put user syslog in group tty (to handle broadcasts
to all users), and syslogd can setuid to syslog as soon as it has its
sockets open.
All these root-level daemons floating around is a disaster waiting to
happen. Certainly something as simple as syslog doesn't need that
kind of privilege.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?m0sqPDt-00004yC>