finger daemons

1998-04-23 Thread Paul Miller

Are there any finger daemons available that do not require home
directories world readable+executable?  I want to beable to have a .pgpkey
file in my home directory without being world readable+executable -- it
doesn't even have to be suid root, all my home directories are group
readable+executable by the www-data group... so the finger daemon could
run as guid www-data.

I guess for this to be secure, the program would need to copy the file to
memory(?), give up its permissions, and then display the file...

-Paul


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: finger daemons

1998-04-23 Thread Martin Schulze
On Thu, Apr 23, 1998 at 12:26:34AM -0400, Paul Miller wrote:
 
 Are there any finger daemons available that do not require home
 directories world readable+executable?  I want to beable to have a .pgpkey
 file in my home directory without being world readable+executable -- it
 doesn't even have to be suid root, all my home directories are group
 readable+executable by the www-data group... so the finger daemon could
 run as guid www-data.

Try to use cfingered.  It ought to act with uid of the user when
accessing their files.

Regards,

Joey

-- 
  / Martin Schulze  *  [EMAIL PROTECTED]  *  26129 Oldenburg /
 / http://home.pages.de/~joey/
/  Never trust an operating system you don't have source for!   /


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


finger daemons

1997-08-05 Thread Paul Miller
-BEGIN PGP SIGNED MESSAGE-

I recently installed cfingerd and it doesn't work with secure home
directories -- I noticed that adding support to open user files as root
and then switch to nobody was *LAST* on their TODO list.  Are there any
other finger daemons that have this support and are as good as cfingerd?

Also, thanks to all those users who tried to help me w/ cfingerd earilier
on this list.

- -Paul

-BEGIN PGP SIGNATURE-
Version: 2.6.3a
Charset: noconv

iQB1AwUBM+ajp/MRUhbnJu3lAQGnZAMAiF3nZx+smu2Ye4OYw6gfhwbj4T7DQsYS
ZNcLR9zCYO5q/wG14mDgiAqNJV1Ng5vX6yLBh9QcMnF6BWgYTVmSexg7QnbaJPw4
7IsiJWay8C0Vaq5U9/nU6nar65DUNcfD
=mbwp
-END PGP SIGNATURE-


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: finger daemons

1997-08-05 Thread A. M. Varon
On Mon, 4 Aug 1997, Paul Miller wrote:

 -BEGIN PGP SIGNED MESSAGE-
 
 I recently installed cfingerd and it doesn't work with secure home
 directories -- I noticed that adding support to open user files as root
 and then switch to nobody was *LAST* on their TODO list.  Are there any
 other finger daemons that have this support and are as good as cfingerd?
 
 Also, thanks to all those users who tried to help me w/ cfingerd earilier
 on this list.

You could install cfingerd-1.3.2.noroot.tar.gz. Install and compile it. 
Available at your nearest sunsite mirrors worldwide.

It's basically a hacked cfingerd which enables it to run as nobody. Tested
and it, and I'm very satisfied with it. 

regards,



 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Andre M. Varon Lasaltech Incorporated
 Technical Head Fax-Tel: (034)433-3520
 e-mail  : [EMAIL PROTECTED]
 web page: http://www.lasaltech.com/andre.html
 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=





--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .


Re: finger daemons

1997-08-05 Thread Martin Schulze
A. M. Varon writes:

  directories -- I noticed that adding support to open user files as root
  and then switch to nobody was *LAST* on their TODO list.  Are there any
  other finger daemons that have this support and are as good as cfingerd?
  
  Also, thanks to all those users who tried to help me w/ cfingerd earilier
  on this list.
 
 You could install cfingerd-1.3.2.noroot.tar.gz. Install and compile it. 
 Available at your nearest sunsite mirrors worldwide.
 
 It's basically a hacked cfingerd which enables it to run as nobody. Tested
 and it, and I'm very satisfied with it. 

But will probably not fix the problem that he seems to need a cfingerd
which opens the files as *root*.

Regards

Joey
--
  / Martin Schulze  *  [EMAIL PROTECTED]  *  26129 Oldenburg /
 /  Mensch soll es nicht glauben:/
/eMail ist zum Kommunizieren geeignet.  -- Lutz Donnerhacke /


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word unsubscribe to
[EMAIL PROTECTED] . 
Trouble?  e-mail to [EMAIL PROTECTED] .