Re: unsafe file permissions on /usr/bin/login
Kamil Rytarowski <[email protected]> Wed, 28 Nov 2018 17:40:31 +0100
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <[email protected]> |
There is probably little point to run sudo as root. On 28.11.2018 17:05, JP wrote: > Not exactly. login is much different from sudo (and I don't think we > have sudo do we?) > > Login is already run as root. suid-root is asking for trouble. > > On Wed, Nov 28, 2018 at 11:03 AM Martin Husemann <[email protected] > <mailto:[email protected]>> wrote: > > On Wed, Nov 28, 2018 at 10:56:05AM -0500, JP wrote: > > The file should not be suid > > That is like asking for sudo not to be setuid root. > > Martin >
signature.asc
(application/pgp-signature, 850 B)
-----BEGIN PGP SIGNATURE----- iQJABAEBCAAqFiEELaxVpweEzw+lMDwuS7MI6bAudmwFAlv+xP8MHG41NEBnbXgu Y29tAAoJEEuzCOmwLnZsD0oP/1TYd2y5aoJyUmfmzuOW1f7azLy99f2Xmd9rGnqh qT2pcW9GtJjFfidfTqYjtCn21mWgzKK4ja7OBaWjNkR5ntzElPZQobEP/wBKLq7Q g1GvWQ51IhbWMESrfSTTBaMi/6D+ipvx7jrjtnzocL8mA/qgH7zaHgIdFqwVtfan ge8OZ1wNjGVvccblxaKhcP/tmxGXBEbakGjgoIvQU7izphSH0zWXC/FPsue++bia TZ8K0x/IcTU95WEXtFVZz45/jPP/cykVFX/+p6zz4fHhH3eKBZ1HtdJ21lZEVzDb USU0eQC/CPAx3yBVnpKzONG1UwUlvG/dGyo7aHX64rIBN8nxD9VZHTsoX22ewipa GP5mRnvwtLo2Ej3JLRR52HRNRxW0GdR5vXDVVvzXJch/k0XcQDcglbzMIQQpBtDA jwzwEgRQdjz6hn3l5QZxqWziMmbDTnGcgdKy8JaHyToDZaM3Tcov90Uaef6jlHI8 E4p2tWo2y6T/e0YlQpJYvadS+c8Msaenpgkt/poAnWW6TS7I96x1VAzmdsigSgtu mZ3Dmmj4FREkmG7oZVyMrFWwvtQ4hrptVJrdcxF+F8PRK9vIMjq6Ishiw7N/Gxgg mEj6TL/kIj1yNR88r5xwaRXSjckbgjHxh3TqfWc1I6vX5aIQ3ap7HftJwjn5lCSV jr+x =V3K0 -----END PGP SIGNATURE-----