Subject: Re: CVS commit: src/usr.sbin/timed/timedc
To: None <tech-userlevel@netbsd.org>
From: Elad Efrat <elad@NetBSD.org>
List: tech-userlevel
Date: 01/27/2007 20:42:07
Christian Biere wrote:
> Module Name: src
> Committed By: cbiere
> Date: Sat Jan 27 17:57:45 UTC 2007
>
> Modified Files:
> src/usr.sbin/timed/timedc: Makefile cmdtab.c timedc.c timedc.h
>
> Log Message:
> * timedc is no longer setuid-root and is only usable by root due to the
> use of a raw socket for ICMP; thus there is also no need to differ
> between privileged and unprivileged commands.
> * Switch to user "nobody" after allocating the raw socket.
> * Close all file descriptors above 2 (just in case).
I'd like to see this changed so it switches to a dedicated user rather
than nobody.
-e.