On Sun, Jul 09, 2000 at 04:18:42PM -0700, [EMAIL PROTECTED] wrote:
> SUMMARY:
>
> Versions of LPRng-3.6.1-LPRng-3.6.15 installed the 'lpd' program 'SETUID root'
> by default.
>
> The lpd executable should be OWNED by root, but not SETUID root.
I believe that Debian has not had lpd setuid root for a long time if at
all.
While we are on a setuid thread, is the following safe?
chmod u+s `pwd`/debian/tmp/usr/bin/lpr
chmod u+s `pwd`/debian/tmp/usr/bin/lprm
chmod u+s `pwd`/debian/tmp/usr/bin/lpq
- Craig
--
Craig Small VK2XLZ GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5
Eye-Net Consulting http://www.eye-net.com.au/ <[EMAIL PROTECTED]>
MIEEE <[EMAIL PROTECTED]> Debian developer <[EMAIL PROTECTED]>
-----------------------------------------------------------------------------
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
