From owner-cvs-bin Thu Aug 11 16:51:26 1994 Return-Path: cvs-bin-owner Received: (from root@localhost) by freefall.cdrom.com (8.6.8/8.6.6) id QAA24286 for cvs-bin-outgoing; Thu, 11 Aug 1994 16:51:26 -0700 Received: from Root.COM (implode.Root.COM [198.145.90.241]) by freefall.cdrom.com (8.6.8/8.6.6) with ESMTP id QAA24262; Thu, 11 Aug 1994 16:50:57 -0700 Received: from corbin.Root.COM (corbin.Root.COM [198.145.90.2]) by Root.COM (8.6.8/8.6.5) with ESMTP id QAA10422; Thu, 11 Aug 1994 16:50:56 -0700 Received: from localhost (localhost [127.0.0.1]) by corbin.Root.COM (8.6.9/8.6.5) with SMTP id QAA05644; Thu, 11 Aug 1994 16:50:50 -0700 Message-Id: <199408112350.QAA05644@corbin.Root.COM> X-Authentication-Warning: corbin.Root.COM: Host localhost didn't use HELO protocol To: "Garrett A. Wollman" cc: ache@freefall.cdrom.com, adam@freefall.cdrom.com, alm@freefall.cdrom.com, ats@freefall.cdrom.com, bde@freefall.cdrom.com, csgr@freefall.cdrom.com, cvs-bin@freefall.cdrom.com, dyson@freefall.cdrom.com, guido@freefall.cdrom.com, hsu@freefall.cdrom.com, jkh@freefall.cdrom.com, jvh@freefall.cdrom.com, karl@freefall.cdrom.com, martin@freefall.cdrom.com, nate@freefall.cdrom.com, paul@freefall.cdrom.com, phk@freefall.cdrom.com, proven@freefall.cdrom.com, pst@freefall.cdrom.com, rgrimes@freefall.cdrom.com, rich@freefall.cdrom.com, sean@freefall.cdrom.com, smace@freefall.cdrom.com, sos@freefall.cdrom.com Subject: Re: cvs commit: src/bin/ps Makefile In-reply-to: Your message of "Thu, 11 Aug 94 13:06:58 PDT." <199408112006.NAA15954@freefall.cdrom.com> From: David Greenman Reply-To: davidg@Root.COM Date: Thu, 11 Aug 1994 16:50:49 -0700 Sender: cvs-bin-owner@freefall.cdrom.com Precedence: bulk >wollman 94/08/11 13:06:56 > > Modified: bin/ps Makefile > Log: > Make `ps' set-uid root so that it can read the same set of arguments > that old `ps'es did. I'm not too thrilled about this, but I'm not > enough of an FS person to hack procfs so that /proc/xxx/mem is readable > by members of group `kmem'. If this is done, then `ps' can go back to > being set-gid kmem. Umm...yeah, that's a problem. Okay: We have a choice. We can either make the mem file in the procfs owned by group kmem and group readable, or we can make everything that needs this be setuid root as you have done above. The problem with making mem gid kmem is that it current has the uid and gid of the running process. If we change this, then this will no longer be true. This is probably of marginal utility, so we should probably change it group kmem. I'm open to other opinions... -DG