Bugtraq mailing list archives

Re: /etc/utmp

From: ccsis () ss1 bath ac uk (Icarus Sparry)
Date: Mon, 28 Mar 1994 23:48:01 +0100

Much better is to start it off as root, let it run that way just long
enough to set its group list, and then setuid to someone boring and
do whatever might have bugs...



I agree. My mail was pointing out that the idea of using SGID as a
way of avoiding being root was flawed.

Current thread:

here's a weird one *Hobbit* (Mar 10)