Re: lpd: the thin edge of the wedge?

"Julian H. Stacey" <[email protected]> writes:
> Old simple small lpr/lpd code that compiles & runs should not be removed,
> it would gratuitously disrupt small users (*).  Those who dont
> want to further maintain aka enhance it, best stop work, not remove it.

These programs are setuid root=C2=B9 and can't work without it.  If there i=
s a
buffer overflow in one of them, you are cooked.

=C2=B9 except lpd(8), but it's a daemon that runs as root and accepts
  connections from anyone over a Unix socket, plus parses any file that
  any local user deposits in the spool using lpr(1).

DES
--=20
Dag-Erling Sm=C3=B8rgrav - [email protected]