Re: Setuid

["Bernd Eckenfels" <mail.inka.de!lina!lina.inka.de!lists>]

Hi,

> > This same thing applied to all packages linked against svgalib, including
> > ghostscript.
> 
> What I've done with gs is make it _not_ setuid by default.

svgalib drops SU privileges after init. You only should veryfy, that the
init functio is the first thing called in the application and you are rather
safe.

Greetings
Bernd

--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com