Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Jan 2004 18:00:55 +0100
From:      Radko Keves <rado@studnet.edu.eu.org>
To:        questions@freeBSD.org
Cc:        security@freeBSD.org
Subject:   FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs part 2
Message-ID:  <20040130170055.GA74447@studnet.edu.eu.org>

next in thread | raw e-mail | index | archive | help
hi

i read FreeBSD Security Advisory FreeBSD-SA-04:01.mksnap_ffs

and have question about this workaround:

/bin/rm /sbin/mksnap_ffs

isn't better to do:
/bin/chmod u-s /sbin/mksnap_ffs

i think that suid flag is dangerous on this program not program as is
and when suid flag is down program is clear for everyone except root

if is dangerous program, so erase it isn't good workaround, because
every user can compile mksnap_ffs from source but suid flag can give
only root

thank and bye
-- 
"The ancient Greeks' concept of a ``personal daemon'' was similar to 
the modern concept of a ``guardian angel'' --- ``eudaemonia'' is the 
state of being helped or protected by a kindly spirit. As a rule, 
UNIX systems seem to be infested with both daemons and demons." 
[Evi Nemeth]



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040130170055.GA74447>