[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Quake No longer running for users



On 02-Mar-99 Dale E. Martin wrote:
> Michael Beattie <mickyb@es.co.nz> writes:
> 
>> Svgalib needs suid root permissions. To give the executable the proper
>> permissions, execute `chmod u+s /usr/games/squake.real`
>> 
>> The executable in the .deb is not like this for security reasons.
> 
> Make sure you check out the following link if you're going to set your
> Quake2 binary suid root (or run it as root.)  I've set my firewall up 
> to deal with the Quake2 exploit found here:
> http://www.insecure.org/sploits_remote.html
> 

What about making squake and squake.real owned by root.games and then
making both suid root?  Then place trusted users in the "games" group.  That
lets me execute quake as pollywog instead of as root.

It seems to work for me, though there might be problems later, I suppose.

--
Andrew
----------------------
PGP Key ID 0x5EE61C37
PGP5.0
----------------------


Reply to: