Dans un message du 05 jan ` 11:59, Marcy Cortes icrivait :
> SLES 7 seems to have the following: mount ping umount at chage chfn
> chsh crontab gpasswd rlogin rcp rsh sendmail traceroute
>
> SLES 8 has all the above except for rcp rlogin rsh sendmail &
> traceroute
>
> Is everything going to fall apart if I change them? Or can anyone
> point out why these programs need it so I can justify it to them?
mount, umount: support of the user option
ping: needed to use raw sockets
at: writing to the jobs queue
chage,chfn,chsh: writing to /etc/{passwd,shadow}
gpasswd: change group passwd
Well I do not think you risk much by removing the setuid bit on those.
Just more sysadmin work maybe. ping might be used by some scripts ..
Those are fairly common and standard tools so you can expect that they
drop root privileges asap. So it is not certain that it is really worth
the trouble.
--
Guillaume Morin <[EMAIL PROTECTED]>
A friend in need is a friend indeed. A friend who bleeds is better.
My friend confessed, she passed the test. We will never sever.
(Placebo)
