Subject: Re: Fix for PR security/8069: man(1) vulnerability
To: None <tech-security@netbsd.org>
From: Christoph Badura <bad@oreilly.de>
List: tech-security
Date: 07/26/1999 06:42:02
tv@pobox.com (Todd Vierling) writes:
>On Mon, 26 Jul 1999, matthew green wrote:
>: on second thoughts, using 'nobody' is kinda hoaky, being defined as
>: the "unauthorised root" user on NFS, this may actually provide more
>: access than you think...
>We need an account which means "not supposed to have any privileges", to
>which root may drop in some programs. "noaccess", anyone?
daemon:daemon is there precisely for that purpose.
--
Christoph Badura www.netbsd.org
Anything that can be done in O(N) can be done in O(N^2).
-- Ralf Schuettau (after looking at a particular piece of code)