SPS - a useful replacement for ps(1) (but....)

[Spencer W. Thomas]

In article <2288 at flame.warwick.UUCP> kay at warwick.UUCP (Kay Dekker) writes:
>>This also means that sps need not be a setuid program.
>
>*Need* not, admittedly: however, that means that /dev/drum, /dev/mem and
>/dev/kmem all need to be generally readable.  And I seem to remember that
>that wouldn't be a good idea ... or am I wrong?

You can take the solution we have used for some time -- make /dev/drum,
... readable by a special group (we call it MEM), but not by the general
public.  Then, make ps, pstat, ... setGID to MEM.

-- 
=Spencer   ({ihnp4,decvax}!utah-cs!thomas, thomas at utah-cs.ARPA)
	"You don't get to choose how you're going to die.  Or when.
	 You can only decide how you're going to live." Joan Baez