From owner-freebsd-questions  Wed Mar 19 03:28:42 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id DAA17048
          for questions-outgoing; Wed, 19 Mar 1997 03:28:42 -0800 (PST)
Received: from matrix.42.org (sec@matrix.42.org [192.68.213.129])
          by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id DAA17037
          for <freebsd-questions@freebsd.org>; Wed, 19 Mar 1997 03:28:38 -0800 (PST)
Received: (from sec@localhost) by matrix.42.org (8.6.12/8.6.12) id MAA20222; Wed, 19 Mar 1997 12:28:22 +0100
To: freebsd-questions@freebsd.org
Path: sec
From: sec@42.org (Stefan `Sec` Zehl)
Newsgroups: muc.lists.freebsd.questions
Subject: Re: Is a device entry setuid to root a security issue?
Date: 19 Mar 1997 12:28:22 +0100
Organization: Internet@home
Lines: 22
Message-ID: <slrn5ivjel.h74.sec@matrix.42.org>
References: <19970318232111.57970@mpress.mpress.com>
X-Newsreader: slrn (0.9.3.0-2 BETA UNIX)
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Re,

In article <19970318232111.57970@mpress.mpress.com>, Brian Litzinger wrote:
> ERROR: home.xxx.com: [can not read/write /dev/null: Permission denied]
> 
> So I took a peek:
> 
> brian@home>ls -ld /dev/null
> cr-sr-xr-x  1 root  bin    2,   2 Dec 10 17:45 /dev/null*            
> 
> Is this a security risk?

I dont think so, but anyway the permissions should look like this, i guess
matrix:~>ll /dev/null
crw-rw-rw-  1 root  wheel    2,   2 Mar 19 12:11 /dev/null

CU,
	Sec
-- 
Fuer die Raupe ist es das Ende der Welt,
Fuer den Rest der Welt ist es ein Schmetterling
							    Error 0: No error