Michael Richardson wrote :
>
> [snip]
>
> Actually, I'd rather make chroot() and <1024 priveledges be
> contingeant on being in group "daemon" and never run these servers as
> root as at all.
>
Wouldn't that increase the ease of opening privileged ports on a machine
and thus doing such things as denial of service, password capture, and
so on ?
--
Michel Lavondes
E-Mail : lavondes @
tidtest .
total .
fr
lavondes%tidtest .
total .
fr @
pegase .
total .
fr (if previous addr rejected)
Tel : +33-1-4135-4198
Fax : +33-1-4135-4189
Follow-Ups:
References:
|
|
