[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /var/run/utmp



On Tue, Mar 16, 1999 at 11:21:19AM +0100, Roland Rosenfeld wrote:
> On Tue, 16 Mar 1999, Branden Robinson wrote:
> 
> > Really, please put it back soon. It's time to migrate. It's *BAD* to
> > have stuff sitting around setuid root just so it can muck with the
> > utmp file.
> 
> Maybe a stupid question, but does utmpd also change the permissions
> and ownership of /dev/tty*? Please note, that this is the second
> reason, why some programs have to run SUID root.

When maintaining of pty's is done by /dev/pts or pt_chown,
there it NO reasin, IMHO, to make a program setuid-root to maintain
utmp.  It's enough to 
addgroup utmp
chgrp utmp /var/run/utmp /var/log/wtmp
chmod 664 /var/run/utmp /var/log/wtmp
chgrp utmp a_program
chmod 2755 a_program

I live with a patched for Unix98 pty stuff glibc2.0 and such
configuration for a few months and have things ok.  Are there
any potential problems in such a configuration?

Ilya Ovchinnikov       -------------------------------------
                          Internet Service and Information
 ILO2-RIPE                Providing Center of Pushchino
 e-mail: ilya@psn.ru      Research Center of RAS
 phone: +7(0967)73-90-03  Pushchino, Moscow region, Russia.
                          http://prc.psn.ru/
============================================================


Reply to: