WARNING: SCO-Xenix game "hack", setuid root NO DANGER, OOOOPS

David Schanen mtv at milton.u.washington.edu
Wed Apr 24 16:59:40 AEST 1991


   It's probably setuid so that the program can update a score file.  The
score file should have protections set so that noone can modify it without
running the program(setuid and owned by 'user'.)  If you are really concerned
you can make a games user (and possibly group) for all the games stuff.

	-Dave

Ps  What is the newsgroup sub.security?

-- 

 Inet: mtv at milton.u.washington.edu  * 8kyu *  UUNET: ...uunet!uw-beaver!u!mtv



More information about the Comp.unix.admin mailing list