From owner-freebsd-security  Mon Nov 16 04:03:37 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id EAA27806
          for freebsd-security-outgoing; Mon, 16 Nov 1998 04:03:37 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from iaehv.IAEhv.nl (iaehv.IAEhv.nl [194.151.64.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id EAA27787
          for <freebsd-security@FreeBSD.org>; Mon, 16 Nov 1998 04:03:32 -0800 (PST)
          (envelope-from wjw@surf.IAE.nl)
Received: from surf.IAE.nl (root@surf.IAEhv.nl [194.151.66.2])
	by iaehv.IAEhv.nl (8.8.7/8.8.7) with ESMTP id NAA18359;
	Mon, 16 Nov 1998 13:03:05 +0100 (CET)
Received: (from wjw@localhost)
	by surf.IAE.nl (8.8.7/8.8.7) id NAA21406;
	Mon, 16 Nov 1998 13:03:04 +0100 (MET)
From: Willem Jan  Withagen <wjw@surf.IAE.nl>
Message-Id: <199811161203.NAA21406@surf.IAE.nl>
Subject: Re: Would this make FreeBSD more secure?
In-Reply-To: <199811161055.CAA18393@apollo.backplane.com> from Matthew Dillon at "Nov 16, 98 02:55:14 am"
To: dillon@apollo.backplane.com (Matthew Dillon)
Date: Mon, 16 Nov 1998 13:03:04 +0100 (MET)
Cc: freebsd-security@FreeBSD.ORG
Reply-To: wjw@IAEhv.nl
X-NCC-RegID: nl.iae
X-Mailer: ELM [version 2.4ME+ PL40 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

You ( Matthew Dillon ) write:
=>      I wonder how many other programs can be trivially fixed like that.
=>      Certainly sendmail does not need to be run as root, yet it is in
=>      /usr/src/etc/rc.  lpd ?  Why in gods name does lpd need to be run 
=>      as root?

lpd (and friends) have a replacement: LPRng. Which runs as GID daemon, and
has a lot of nice other features. Next to the fact that it is a maintained
product.

--WjW

-- 
Internet Access Eindhoven BV.,  voice: +31-40-2 393 393, data: +31-40-2 606 606
P.O. 928, 5600 AX Eindhoven, The Netherlands
Full Internet connectivity for only fl 12.95 a month.
Call now, and login as 'new'.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message