[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-devel-list
Subject:    Re: utmp and friends
From:       Bill Nottingham <notting () redhat ! com>
Date:       2007-06-27 12:25:24
Message-ID: 20070627122524.GD23234 () nostromo ! devel ! redhat ! com
[Download RAW message or body]

Miroslav Lichvar (mlichvar@redhat.com) said: 
> > The entire idea of utempter is so that the terminal *doesn't* need to be
> > setgid - if it's setgid, what's the point of a helper?
> 
> Well, the terminal doesn't need to be setgid utmp, but only utempter.
> Setgid utempter allows only adding/removing entries in utmp while
> setgid utmp allows unrestricted access.

Only if it's coded wrong (doesn't drop privs, etc.). By adding a
setgid to the binary, you're making the point of separating it
merely a code-sharing issue, as opposed to any huge security gains.

I'd remove the block on the directory - basically, you're intentionally
breaking user's environments for illusory security.

Bill

-- 
fedora-devel-list mailing list
fedora-devel-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-list
[prev in list] [next in list] [prev in thread] [next in thread]