On Mon, 27 Mar 100, T.E.Dickey wrote:

> > 
> > On Sun, 26 Mar 100, T.E.Dickey wrote: 
> >  
> > > * disable setuid on initialization -TD 
> >  
> > Why? 
> 
> because I noticed several places in the temp-file checks that would
> be rather difficult to remedy otherwise.

I still believe there are legitimate uses for making lynx setuid
or setgid.  Mostly for non-interactive use.  (not necessarily
setuid root).

I would protest if 'cat' suddenly refused to honor setuid/setgid
bits.  Lynx can be used in similar ways as cat, as a filter.
So it should behave the same way.  I shouldn't have to write a C
wrapper for every little utility that I want to operate with
different privileges.

   Klaus




Reply via email to