From owner-freebsd-security  Tue Mar 30  0:33:39 1999
Delivered-To: freebsd-security@freebsd.org
Received: from zippy.cdrom.com (zippy.cdrom.com [204.216.27.228])
	by hub.freebsd.org (Postfix) with ESMTP id 12EA314D93
	for <freebsd-security@FreeBSD.ORG>; Tue, 30 Mar 1999 00:33:37 -0800 (PST)
	(envelope-from jkh@zippy.cdrom.com)
Received: from zippy.cdrom.com (localhost [127.0.0.1])
	by zippy.cdrom.com (8.9.3/8.9.3) with ESMTP id AAA43894;
	Tue, 30 Mar 1999 00:32:53 -0800 (PST)
	(envelope-from jkh@zippy.cdrom.com)
To: "Harry M. Leitzell" <Harry_M_Leitzell@cmu.edu>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: Curious about 'hoststat' 
In-reply-to: Your message of "Tue, 30 Mar 1999 02:02:24 EST."
             <Pine.SOL.3.96L.990330015216.2230A-100000@unix8.andrew.cmu.edu> 
Date: Tue, 30 Mar 1999 00:32:53 -0800
Message-ID: <43892.922782773@zippy.cdrom.com>
From: "Jordan K. Hubbard" <jkh@zippy.cdrom.com>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

> 	Well, I am going through a FreeBSD machine and removing the suid
> bits on programs that have no purpose having them for a simple user host
> machine.  Going through /var/log/setuid.today and changing the permissions
> on the programs seems like a good idea until I got to 'hoststat'.

Look at the inode number - it's the same file as /usr/sbin/sendmail.
It's just there as a convenient hook.

- Jordan


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message