Daniel Hain wrote: > > Security Impact: > > The program uses a raw socket to communicate and requires root access > (geteuid() == 0). >
1. Of course, you really mean that it requires sufficient privilege to
use a raw socket. Please confirm that there will be no geteuid() == 0
check in the code.
2. If the program is only usable by a privileged user, might it belong
in /usr/sbin instead of /usr/bin?
Scott
