[7485] in bugtraq
Re: Possible root exploit in Linux povray
daemon@ATHENA.MIT.EDU (Dag-Erling Coidan =?iso-8859-1?Q?S)
Thu Jul 30 12:57:19 1998
Date: Wed, 29 Jul 1998 19:40:46 +0200
Reply-To: Dag-Erling Coidan =?iso-8859-1?Q?Sm=F8rgrav?= <dag-erli@IFI.UIO.NO>
From: Dag-Erling Coidan =?iso-8859-1?Q?Sm=F8rgrav?= <dag-erli@IFI.UIO.NO>
X-To: Luke <luke@UTW.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Luke's message of "Tue, 28 Jul 1998 21:57:18 -0600"
Luke <luke@UTW.COM> writes:
> In the official (3.02) release of povray for linux, the s-povray bina=
ry
> must be installed suid root to function (complains about not being ab=
le to
> open /dev/console without it).
Can somebody please explain to me why a raytracing package needs root
privs? Why does it even need access to the console at all? What's
wrong with std{in,out,err}?
DES
--
Dag-Erling Sm=F8rgrav - dag-erli@ifi.uio.no
