Re: unsafe file permissions on /usr/bin/login

Kamil Rytarowski <[email protected]> Wed, 28 Nov 2018 17:40:31 +0100
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]>
There is probably little point to run sudo as root.

On 28.11.2018 17:05, JP wrote:
> Not exactly.  login is much different from sudo (and I don't think we
> have sudo do we?)
> 
> Login is already run as root.  suid-root is asking for trouble.
> 
> On Wed, Nov 28, 2018 at 11:03 AM Martin Husemann <[email protected]
> <mailto:[email protected]>> wrote:
> 
>     On Wed, Nov 28, 2018 at 10:56:05AM -0500, JP wrote:
>     > The file should not be suid
> 
>     That is like asking for sudo not to be setuid root.
> 
>     Martin
>
signature.asc (application/pgp-signature, 850 B)
-----BEGIN PGP SIGNATURE-----
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=V3K0
-----END PGP SIGNATURE-----