Subject: Re: CVS commit: src/usr.sbin/timed/timedc
To: None <tech-userlevel@netbsd.org>
From: Elad Efrat <elad@NetBSD.org>
List: tech-userlevel
Date: 01/27/2007 20:42:07
Christian Biere wrote:
> Module Name:	src
> Committed By:	cbiere
> Date:		Sat Jan 27 17:57:45 UTC 2007
> 
> Modified Files:
> 	src/usr.sbin/timed/timedc: Makefile cmdtab.c timedc.c timedc.h
> 
> Log Message:
>  * timedc is no longer setuid-root and is only usable by root due to the
>    use of a raw socket for ICMP; thus there is also no need to differ
>    between privileged and unprivileged commands.
>  * Switch to user "nobody" after allocating the raw socket.
>  * Close all file descriptors above 2 (just in case).

I'd like to see this changed so it switches to a dedicated user rather
than nobody.

-e.