Aucbvax.2801
fa.unix-wizards
utzoo!decvax!ucbvax!unix-wizards
Tue Aug 25 18:36:34 1981
Re: On the Correctness of Set-User-ID programs
>From JNC@MIT-XX Tue Aug 25 10:53:05 1981
       This is precisely the situation in which groups are useful.  I
use them all over to simulate protected domains (I take it that you
all understand this concept?), since there are plenty of spare gid's.
There is entirely too much software in UNIX that runs setuid to root;
I bet I could get it down (with a little finagling, such as a second
uid with less built in priviledges for things like mkdir) to almost
nothing if I were really concerned about it on my system.
-------

-----------------------------------------------------------------
gopher://quux.org/ conversion by John Goerzen <[email protected]>
of http://communication.ucsd.edu/A-News/


This Usenet Oldnews Archive
article may be copied and distributed freely, provided:

1. There is no money collected for the text(s) of the articles.

2. The following notice remains appended to each copy:

The Usenet Oldnews Archive: Compilation Copyright (C) 1981, 1996
Bruce Jones, Henry Spencer, David Wiseman.