Re: Checkpassword 0.90 + Redhat 9.0

[email protected] (Paul Jarc) Wed, 02 Jul 2003 14:05:28 -0400

Newsgroups	gmane.comp.djb.checkpassword
Organization	What did you have in mind? A short, blunt, human pyramid?
Message-ID	<[email protected]>

Sean Kennedy <[email protected]> wrote:
> ls -lL /bin/checkpassword
> -r-s--s--t    1 root     root         8.5k Dec 13  2001 /bin/checkpassword

The setuid bit explains why it works.  The setgid and sticky bits
serve no purpose, though.  I'd suggest "chmod g-s,-t".  As for the
setuid bit, it's a tradeoff.  There's a risk in having a root process
talking to the network, but there also a risk in having another setuid
program on the system.

> I need qmaild to be able to check system passwords using
> checkpassword,

Are you sure you can't just run the caller as root?  What is the
caller?

paul