Re: pppd and setuidness (was Re: 3 Questions)

1996-06-17 Thread Richard Kettlewell
>>One could make the uid of the account zero to achieve this without >>making pppd setuid, though I can imagine this making people jump up >>and down about security - can anyone think of an attack on this? > >If the user figures a way to change their shell, you're dead. Quite so. Similarly if th

Re: pppd and setuidness (was Re: 3 Questions)

1996-06-16 Thread Jeffery S. Coy Jr.
On Sun, 16 Jun 1996, Richard Kettlewell wrote: > >>good question. and why isn't pppd setuid root? if it's a security issue, > >>a ppp group would be in order. > > > > Personally I find that the diald package is an excellent way of > avoiding this whole issue. However: > i've been using kerne