Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Nov 2001 10:29:36 +0100
From:      "Anthony Atkielski" <anthony@freebie.atkielski.com>
To:        "Peter Pentchev" <roam@ringlet.net>
Cc:        "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG>, <freebsd-security@FreeBSD.ORG>
Subject:   Re: setuid on nethack?
Message-ID:  <016001c17338$37d65240$0a00000a@atkielski.com>
References:  <014201c17336$40653f90$0a00000a@atkielski.com> <20011122112415.B855@straylight.oblivion.bg>

next in thread | previous in thread | raw e-mail | index | archive | help
After seeing that the owner and group were games, I set the permissions back to
2511, which I assume is safe.

Do I need to take special precautions if I play this game from root?  Would 6511
be a better choice in that case?

----- Original Message -----
From: "Peter Pentchev" <roam@ringlet.net>
To: "Anthony Atkielski" <anthony@freebie.atkielski.com>
Cc: "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG>;
<freebsd-security@FreeBSD.ORG>
Sent: Thursday, November 22, 2001 10:24
Subject: Re: setuid on nethack?


> On Thu, Nov 22, 2001 at 10:15:37AM +0100, Anthony Atkielski wrote:
> > This morning I see an e-mail from the system telling me that setuid is set
on
> > nethack, the adventure-style game that I installed recently.  Why would this
> > game require this bit?  I reset it with chmod 0544, which seems like plenty
to
> > me.
>
> AFAIK, many games on Unix systems are setuid or setgid 'games', so that
> any user on the system can read and write the high scores and saved games.
> If you only intend to play Nethack from one particular system account,
> you should have no problem without the setuid bit, but make sure to
> set the appropriate owner/group/permissions on the high scores and
> saved games files/dirs.
>
> G'luck,
> Peter
>
> --
> If this sentence didn't exist, somebody would have invented it.
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?016001c17338$37d65240$0a00000a>