Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 1 Nov 1999 20:40:06 +0100
From:      Ollivier Robert <roberto@keltia.freenix.fr>
To:        freebsd-security@FreeBSD.ORG
Subject:   Re: Examining FBSD set[ug]ids and their use
Message-ID:  <19991101204006.B39857@keltia.freenix.fr>
In-Reply-To: <14365.50723.872972.30971@anarcat.dyndns.org>
References:  <14364.64172.638014.558487@anarcat.dyndns.org> <19991101173955.L72085@bitbox.follo.net> <14365.50723.872972.30971@anarcat.dyndns.org>

next in thread | previous in thread | raw e-mail | index | archive | help
According to Spidey:
> Yes. I found very surprising that xlock would _need_ to be setuid...

You can't get the password of any user if your euid is not 0.
-- 
Ollivier ROBERT -=- FreeBSD: The Power to Serve! -=- roberto@keltia.freenix.fr
FreeBSD keltia.freenix.fr 4.0-CURRENT #74: Thu Sep  9 00:20:51 CEST 1999



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991101204006.B39857>