[5676] in RedHat Linux List
Re: RedHat4.0 security
daemon@ATHENA.MIT.EDU (Erik Troan)
Fri Nov 22 21:50:13 1996
Date: Fri, 22 Nov 1996 21:49:23 -0500 (EST)
From: Erik Troan <ewt@redhat.com>
To: Ian Burrell <iburrell@leland.Stanford.EDU>
cc: redhat-list@redhat.com
In-Reply-To: <19961123001506.1800.qmail@quark.Stanford.EDU>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Fri, 22 Nov 1996, Ian Burrell wrote:
> > Elliot suggested changing this to
> >
> > -r-sr-x---- root news 5332 Sep 09 19:39 /usr/sbin/inndstart
>
> That is rather futile. When it is running as root, it can do anything
> so the group doesn't matter. If it really needs to be group news, it
> can set it itself. SUID only applies to the UID, the GID doesn't
> change, so the innd doesn't become root group in the first case.
>
It prevents standard users from running it though... If there is a problem
in there, it drastically reduces the number of users who can compromise
your system.
Erik
-------------------------------------------------------------------------------
| I told you I'm not very bright -- Sugar in "Some Like It Hot" |
| |
| Erik Troan = ewt@redhat.com = ewt@sunsite.unc.edu |
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
