[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SVGAlib suid binaries?



On Sat, Oct 23, 1999 at 12:45:13PM -0700, Seth R Arnold wrote:
> Joe, perhaps suggest in the postinst script that it *can* be setuid/setgid
> ahd offer to set it there? (gnuplot does this, if one is looking for a
> precedent to follow..)

Note thay once an svgalib application initializes svgalib, all of the
permissions are dropped automatically. So the main security issue, is
making sure that it init's svgalib ASAP in the code.

Ben


Reply to: