Mark Gordon wrote:

> recommending people change it so that it can only be run by root.

How much will this help?
If you receive an evil scene, you either run it with the suid
version, or you su manually and run it as root. In both cases,
the same harm will be done.

The only difference is to avoid attacks by the user himself,
which is hard anyway if he has physical access to the machine.

Ralf

Post a reply to this message