Date: Sun, 3 Aug 1997 14:12:00 +0000 (GMT) From: "Jonathan A. Zdziarski" <jonz@netrail.net> To: Vladimir Litovka <doka@grunt.vl.kharkov.ua> Cc: freebsd-security@FreeBSD.ORG Subject: Re: setuid shutdown? Message-ID: <Pine.BSF.3.95q.970803141145.15140A-100000@netrail.net> In-Reply-To: <5s28mu$pev$1@grunt.vl.kharkov.ua>
next in thread | previous in thread | raw e-mail | index | archive | help
Yah that's enough, I was concerned b/c mine was executable by everybody. ------------------------------------------------------------------------- Jonathan A. Zdziarski NetRail Incorporated Server Engineering Manager 230 Peachtree St. Suite 500 jonz@netrail.net Atlanta, GA 30303 http://www.netrail.net (888) - NETRAIL ------------------------------------------------------------------------- On 3 Aug 1997, Vladimir Litovka wrote: :Hello! : :Jonathan A. Zdziarski <jonz@netrail.net> wrote: : :> I just realized that my version of freebsd 2.2.2 installs with a :> set-uid-root shutdown command allowing anybody who wants to to shutdown or :> reboot the server. : :Why anybody? /sbin/shutdown installed as: : -r-sr-x--- root operator shutdown : :So only users, that is in 'operator' group allowed to start this program. :This is enought security, I think. : :Sinc, Doka : :~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ : ~NewsGate~ (c) Vladimir Litovka <doka@kharkiv.net> :
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.970803141145.15140A-100000>