Source-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
NetBSD master CVS tree commits
- To: source-changes
- Subject: NetBSD master CVS tree commits
- From: The Source of All Evil <source>
- Date: Sat, 10 Aug 1996 16:10:03 -0400 (EDT)
explorer
Sat Aug 10 16:09:21 EDT 1996
Update of /a/cvsroot/src/usr.sbin/lpr/lpr
In directory pain.lcs.mit.edu:/a/tmp/cvs-serv28985
Modified Files:
lpr.c
Log Message:
Fix printing over non-root-exported NFS at least.
The problem here is setuid(euid) is used far too much. Since I removed
many of these calls, and added no new ones, I do not think this weakens
security. In fact, it quite likely improves it quite a bit, since
access() is called as the real userid, and the file is opened for printing
as the real userid rather than the (setuid-root) effective one.
Home |
Main Index |
Thread Index |
Old Index