From owner-freebsd-hackers  Wed Nov 26 11:46:16 1997
Return-Path: <owner-freebsd-hackers>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id LAA13607
          for hackers-outgoing; Wed, 26 Nov 1997 11:46:16 -0800 (PST)
          (envelope-from owner-freebsd-hackers)
Received: from smtp02.primenet.com (smtp02.primenet.com [206.165.6.132])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id LAA13602
          for <hackers@freebsd.org>; Wed, 26 Nov 1997 11:46:12 -0800 (PST)
          (envelope-from tlambert@usr08.primenet.com)
Received: (from daemon@localhost)
	by smtp02.primenet.com (8.8.8/8.8.8) id MAA18246;
	Wed, 26 Nov 1997 12:50:26 -0700 (MST)
Received: from usr08.primenet.com(206.165.6.208)
 via SMTP by smtp02.primenet.com, id smtpd018237; Wed Nov 26 12:50:22 1997
Received: (from tlambert@localhost)
	by usr08.primenet.com (8.8.5/8.8.5) id MAA13372;
	Wed, 26 Nov 1997 12:45:34 -0700 (MST)
From: Terry Lambert <tlambert@primenet.com>
Message-Id: <199711261945.MAA13372@usr08.primenet.com>
Subject: Re: issetugid(2)
To: rcarter@consys.com (Russell L. Carter)
Date: Wed, 26 Nov 1997 19:45:34 +0000 (GMT)
Cc: julian@whistle.com, hackers@freebsd.org
In-Reply-To: <199711261533.IAA17419@dnstoo.consys.com> from "Russell L. Carter" at Nov 26, 97 08:33:30 am
X-Mailer: ELM [version 2.4 PL23]
Content-Type: text
Sender: owner-freebsd-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> Satoshi sent a mail about October 30th, wondering why this hadn't
> caused people problems.  I ran into it yesterday, cvsupping a
> 6 month old 2.2-STABLE to whatever it is today.  The buildworld
> and installworld went without problems but when I tried to
> login to user accounts or launch another xterm, oops! Bash wants
> issetugid.

OK, I give up.  What the heck is it useful for, besides giving a
false sense of security to user space programs which may be
replaced and thus choose not to cooperate with the security model
that it requires?

And just what is the security model it requires anyway?  Seems to
be utterly useless to me...


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.