Previously Manoj Srivastava wrote: > Could some one please supply the language to be finally > included in the policy document?
How about this?
--- policy.sgml.org Tue Jun 8 17:10:09 1999
+++ policy.sgml Tue Jun 8 17:09:41 1999
@@ -2531,6 +2531,21 @@
<sect>
+ <heading>Using pseudo-ttys and modifying wtmp, utmp and lastlog
+
+ <p>
+ Some programs need to create pseudo-ttys. This should be done
+ using Unix98 ptys if the C library supports it. The resulting
+ program should then not be installed setuid root, unless that
+ is required for other functionality.</p>
+
+ <p>
+ The files <tt>/var/run/utmp</tt>, <tt>/var/log/wtmp</tt> and
+ <tt>/var/log/lastlog</tt> should be installed writeable by group
+ utmp. Programs who need to modify those files should be installed
+ install setgid utmp.</p></sect>
+
+ <sect>
<heading>Editors and pagers</heading>
<p>
Wichert.
pgplfY82Yb5TX.pgp
Description: PGP signature
