> BTW, did anyone check the script to see if it worked anywhere other than
> Red Hat? There apparently is a patch for this (make userhelper ignore
> commands with ".." in them, although I would also ask that it refuse to
> execute a command unless owned by root). I haven't bothered to look into
> that.
>
> I just did a "find / -perm +4000 -user root" on my box and it threw up
> 38 matches. Holy cow!
userhelper is a RH specific utility, so I don't think the prob could be
replicated on another distro.
Philip
To subscribe / unsubscribe goto the site www.ilug-bom.org ., click on the mailing list
button and fill the appropriate information
and submit. For any other queries contact the ML maintener
