Re: Permissions Required On hosts.allow ?
On Fri, Aug 30, 2002 at 08:53:09AM -0600, Joe Moore wrote:
> Actually, your realization is wrong. The definitions in /etc/group add a
> supplementary GID to the UID telnetd. There is no change needed in the
> application or sgid bits. The OS handles the initgroups() call.
Buzz. The OS does not enforce that when you're running as user
telnetd, you have telnetd's supplementary groups. initgroups(3) or
setgroups(2) must be called by every application that wants to set
up supplementary groups. It may be that every application you care
about does this--but the next one may not (which is probably a bug,
but it happens).
Meditate on this and you'll realize what a horrific kluge is unix
security. :-)
Andrew
Reply to: