> From [EMAIL PROTECTED] Tue Jul 11 00:57:03 2000
> Date: Tue, 11 Jul 2000 16:53:27 +1000
> To: [EMAIL PROTECTED]
> Subject: Re: LPRng: LPRng lpd should not be SETUID root
> From: [EMAIL PROTECTED] (Craig Small)
>
> On Sun, Jul 09, 2000 at 04:18:42PM -0700, [EMAIL PROTECTED] wrote:
> > SUMMARY:
> >
> > Versions of LPRng-3.6.1-LPRng-3.6.15 installed the 'lpd' program 'SETUID root'
> > by default.
> >
> > The lpd executable should be OWNED by root, but not SETUID root.
> I believe that Debian has not had lpd setuid root for a long time if at
> all.
> While we are on a setuid thread, is the following safe?
> chmod u+s `pwd`/debian/tmp/usr/bin/lpr
> chmod u+s `pwd`/debian/tmp/usr/bin/lprm
> chmod u+s `pwd`/debian/tmp/usr/bin/lpq
>
> - Craig
> --
> Craig Small VK2XLZ GnuPG:1C1B D893 1418 2AF4 45EE 95CB C76C E5AC 12CA DFA5
> Eye-Net Consulting http://www.eye-net.com.au/ <[EMAIL PROTECTED]>
> MIEEE <[EMAIL PROTECTED]> Debian developer <[EMAIL PROTECTED]>
No. But, if you want to have Total compatibility with RFC1179, you
need it. If you are only printing to LPRng servers, then turn it off.
Patrick Powell
-----------------------------------------------------------------------------
If you need help, send email to [EMAIL PROTECTED] (or lprng-requests
or lprng-digest-requests) with the word 'help' in the body. For the impatient,
to subscribe to a list with name LIST, send mail to [EMAIL PROTECTED]
with: | example:
subscribe LIST <mailaddr> | subscribe lprng-digest [EMAIL PROTECTED]
unsubscribe LIST <mailaddr> | unsubscribe lprng [EMAIL PROTECTED]
If you have major problems, send email to [EMAIL PROTECTED] with the word
LPRNGLIST in the SUBJECT line.
-----------------------------------------------------------------------------
