[5663] in RedHat Linux List
Re: RedHat4.0 security
daemon@ATHENA.MIT.EDU (Ian Burrell)
Fri Nov 22 19:16:16 1996
To: redhat-list@redhat.com
Date: Fri, 22 Nov 1996 16:15:05 -0800 (PST)
In-Reply-To: <Pine.LNX.3.93.961122095352.1921M-100000@redhat.com> from "Erik Troan" at Nov 22, 96 09:54:22 am
From: Ian Burrell <iburrell@leland.Stanford.EDU>
Reply-To: iburrell@leland.Stanford.EDU
Resent-From: redhat-list@redhat.com
>
> On Fri, 22 Nov 1996, Cristian Gafton wrote:
>
> > On Thu, 21 Nov 1996, Erik Troan wrote:
> >
> > > -r-sr-xr-x- root root 5332 Sep 09 19:39 /usr/sbin/inndstart
> >
> > binds innd to port 119 and then change the uid to news...
>
> Elliot suggested changing this to
>
> -r-sr-x---- root news 5332 Sep 09 19:39 /usr/sbin/inndstart
>
> comments?
>
That is rather futile. When it is running as root, it can do anything
so the group doesn't matter. If it really needs to be group news, it
can set it itself. SUID only applies to the UID, the GID doesn't
change, so the innd doesn't become root group in the first case.
- Ian
--
-- Ian Burrell == iburrell@leland.stanford.edu **
<URL:http://www-leland.stanford.edu/~iburrell/>
No matter how much you know, you will never know enough.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
