Re: inetd

[Jeff Bailey]

On Mon, Sep 02, 2002 at 11:01:17AM -0400, Alain Magloire wrote:

> In inetutils/NEWS:
>  crated as uid 0.
> ^^^^^^^
> Typo.

Gotit, thanks.

> You mean an inetd security bug?  If yes do you have a fix?

Nope, the rshd security fix where it would create new files as root
regardless of who you were connecting as.  I looked over Chris'
comments, and both the glibc manual and two other "programming
securely" pages seem to agree that the right thing is to just do a
setuid.

The inetd stuff I want to do is just rewriting it so that it's all
copyright the FSF.  I figured it's an easy place to start.

Tks,
Jeff Bailey

-- 
At last you cry out in anguish: "Why me?"
God answers: "Why not?"
 - Sheldon Kopp