From owner-freebsd-security  Fri Jul  9  9:25: 8 1999
Delivered-To: freebsd-security@freebsd.org
Received: from rover.village.org (rover.village.org [204.144.255.49])
	by hub.freebsd.org (Postfix) with ESMTP id 7232C14BE1
	for <security@FreeBSD.ORG>; Fri,  9 Jul 1999 09:25:03 -0700 (PDT)
	(envelope-from imp@harmony.village.org)
Received: from harmony.village.org (harmony.village.org [10.0.0.6])
	by rover.village.org (8.9.3/8.9.3) with ESMTP id KAA05101;
	Fri, 9 Jul 1999 10:24:56 -0600 (MDT)
	(envelope-from imp@harmony.village.org)
Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id KAA20280; Fri, 9 Jul 1999 10:22:45 -0600 (MDT)
Message-Id: <199907091622.KAA20280@harmony.village.org>
To: Gustavo V G C Rios <kernel@tdnet.com.br>
Subject: Re: suid/guid 
Cc: security@FreeBSD.ORG, bos-owner-br@sekure.org
In-reply-to: Your message of "Thu, 08 Jul 1999 13:39:28 -0300."
		<3784D440.1075EFB3@tdnet.com.br> 
References: <3784D440.1075EFB3@tdnet.com.br>  
Date: Fri, 09 Jul 1999 10:22:45 -0600
From: Warner Losh <imp@village.org>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In message <3784D440.1075EFB3@tdnet.com.br> Gustavo V G C Rios writes:
: /bin/df

This is setgid operator.  It is that so that it can report the amount
of disk space free on unmounted partitions, assuming those disks are
group readable by operator (which is the default).

If it makes you nervous, you can remove its setgid-ness.

Idea:  Would it make sense to document in the makefiles of these
programs why it is set[ug]id?  I think it would...

Warner


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message