Re: Retiring lpr and lpd

Slawa Olhovchenkov <[email protected]> writes:
> Just change default for lpd to run w/ -s key.

It will still be full of bugs exploitable by unprivileged local users.

For instance, I just realized this morning that any user on a system
running lpd(8) can trivially trick it into deleting its own lock file,
or into filling the spool with garbage which will not be processed, will
not be shown by lpq(1), cannot be removed with lprm(1), and must be
deleted manually by an administrator.  Empirically, it also seems to
leak log files.  None of this is trivial to fix properly.

And that's not to mention lpq, lpr and lprm which are setugid and can't
work without it (or lpc which is setgid but would probably work fine
without it).

DES
-- 
Dag-Erling Smørgrav - [email protected]