A little while ago I wrote: > (A partial solution would be to mount nosuid. Another part would require a > squash-gid-on-mount option: mount has no such options for NFS, though has > similar options for some other filesystems; there are also uid/gid mapping > options for NFS exports.)
Re-reading, I see it makes no sense (I do not know what I was thinking at the time). Mounting nosuid may be sensible (but suid is often wanted); there is no protection against users (including those in group staff) being trojaned e.g. via their .bashrc files. Cheers, Paul Szabo [EMAIL PROTECTED] http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]