Hello Colin, On Thu, Jun 01, 2000 at 10:58:44PM +0100, Colin Watson wrote: > That's set*g*id. Policy 5.10 explicitly says that games must not be > setuid.
Thanks for the pointer. I guess I should have taken a much closer look at the policy manual. Mea culpa. This means I'll have to convert the code to setgid, which I've never done before. Is there anything particularly dangerous that I should look out for? It's probably not simply a question of replacing all setuid()s with setgid()s. :-) Time to consult the manuals. Rene Weber