[5664] in RedHat Linux List
Re: RedHat4.0 security
daemon@ATHENA.MIT.EDU (Cristian Gafton)
Fri Nov 22 19:21:21 1996
Date: Sat, 23 Nov 1996 02:20:13 +0200 (EET)
From: Cristian Gafton <gafton@sorosis.ro>
To: Ian Burrell <iburrell@leland.Stanford.EDU>
cc: redhat-list@redhat.com
In-Reply-To: <19961123001506.1800.qmail@quark.Stanford.EDU>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Fri, 22 Nov 1996, Ian Burrell wrote:
> > -r-sr-x---- root news 5332 Sep 09 19:39 /usr/sbin/inndstart
> >
> > comments?
> >
>
> That is rather futile. When it is running as root, it can do anything
> so the group doesn't matter. If it really needs to be group news, it
> can set it itself. SUID only applies to the UID, the GID doesn't
> change, so the innd doesn't become root group in the first case.
And what if I start my innd with
su news -c <path>/inndstart
from rc.local ?
The news admin must be able to start and stop the server.
As for need to be group news, hoe could the news user which have the
primary GID news execute it ?!
Cristian Gafton
--
--------------------------------------------------------------------
Cristian Gafton gafton@sorosis.ro
Computers & Communications Center Network Administrator
35 Moara de Foc St., Iasi 6600, ROMANIA Tel: +40-32-252938
http://www.cccis.ro Fax: +40-32-252933
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
UNIX is user friendly. It's just selective about who its friends are.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
