From owner-freebsd-audit Sat Jan 20 3:12:56 2001 Delivered-To: freebsd-audit@freebsd.org Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177]) by hub.freebsd.org (Postfix) with ESMTP id D87E137B401 for ; Sat, 20 Jan 2001 03:12:38 -0800 (PST) Received: (from kris@localhost) by citusc17.usc.edu (8.11.1/8.11.1) id f0KBFVJ41424; Sat, 20 Jan 2001 03:15:31 -0800 (PST) (envelope-from kris) Date: Sat, 20 Jan 2001 03:15:31 -0800 From: Kris Kennaway To: Mark Murray Cc: audit@FreeBSD.org Subject: Re: openpty(8) helper app Message-ID: <20010120031531.A41270@citusc17.usc.edu> References: <20010120011948.A37806@citusc17.usc.edu> <200101201100.f0KB01I52565@gratis.grondar.za> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="G4iJoqBmSsgzjUCe" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200101201100.f0KB01I52565@gratis.grondar.za>; from mark@grondar.za on Sat, Jan 20, 2001 at 01:00:07PM +0200 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --G4iJoqBmSsgzjUCe Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sat, Jan 20, 2001 at 01:00:07PM +0200, Mark Murray wrote: > Generally speaking, this is a method that I like very much. Rather than > making a family of utils insecure by making them setuid, focus the > setuid-needs on the minimum secure setuid applet that you can and > have the previously setuid family of apps call the new, focussed > app. Yes, this is actually something which Redhat does fairly well - small, privileged helper applications to handle privileged tasks so that binaries don't have to be run themselves with privilege. It's a direction I'd like to go down as well. > Modulo the man-pages, this looks very cool. The man pages need to > be modernised a bit. I'll pipe the manpage through a doc-boy prior to commit :-) Kris --=20 NOTE: To fetch an updated copy of my GPG key which has not expired, finger kris@FreeBSD.org --G4iJoqBmSsgzjUCe Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6aXNQWry0BWjoQKURAnjYAJ0dfWcvv9lR4AuSGWwF9ZKmqa4vQACeOgMb 41KWUSJaRhYdgAXiF0/a50U= =Ta7E -----END PGP SIGNATURE----- --G4iJoqBmSsgzjUCe-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message