From owner-freebsd-security Sun Apr 19 12:42:48 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA26039 for freebsd-security-outgoing; Sun, 19 Apr 1998 12:42:48 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from indigo.ie (ts01-10.waterford.indigo.ie [194.125.139.73]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA25981 for ; Sun, 19 Apr 1998 19:42:15 GMT (envelope-from rotel@indigo.ie) Received: (from nsmart@localhost) by indigo.ie (8.8.8/8.8.7) id UAA01293; Sun, 19 Apr 1998 20:39:48 +0100 (IST) (envelope-from rotel@indigo.ie) From: Niall Smart Message-Id: <199804191939.UAA01293@indigo.ie> Date: Sun, 19 Apr 1998 20:39:48 +0000 In-Reply-To: Marc Slemko "Re: suid/sgid programs" (Apr 19, 12:25pm) Reply-To: rotel@indigo.ie X-Mailer: Mail User's Shell (7.2.6 beta(3) 11/17/96) To: Marc Slemko , Karl Denninger Subject: Re: suid/sgid programs Cc: freebsd-security@FreeBSD.ORG Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk On Apr 19, 12:25pm, Marc Slemko wrote: } Subject: Re: suid/sgid programs > On Sun, 19 Apr 1998, Karl Denninger wrote: > > > Things like "ccdconfig" simply don't need to be run as a user process. > > If someone is going to be setting up a ccd set, they are ALREADY going to > > be root! > > Erm... but if someone wants to see what ccds are configured, they don't > need to be root and shouldn't. So you want an extra sgid kmem utility just because you like your curious users to be able to see what your ccd configuration is? How useful is that? Not very. Do it locally if you really must. Niall -- Niall Smart. PGP: finger njs3@motmot.doc.ic.ac.uk FreeBSD: Turning PC's into Workstations: www.freebsd.org Annoy your enemies and astonish your friends: echo "#define if(x) if (!(x))" >> /usr/include/stdio.h To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message