James Carlson wrote: > Nicolas Williams writes: >> On Wed, Feb 27, 2008 at 05:41:21PM -0800, Scott Rotondo wrote: >>> 2. If the program is only usable by a privileged user, might it belong >>> in /usr/sbin instead of /usr/bin? >> OT (Reply-To set): > > But ignored. ;-} > >> Waaa. I hope the ARC gets around to setting a precedent for placing >> low-risk in /usr/bin instead of /usr/sbin. > > We have a precedent. Things that are useful only for the system > administrator go in /usr/sbin. Things that are useful for regular > users go in /usr/bin. > > That precedent is documented on the filesystem(5) man page. > > It has nothing to do with privilege or risk. The only question to > answer here (for this issue) is whether fping is useful for ordinary > users. If it's not, then /usr/sbin would be the right answer. > > As for the privilege check, the reason the code does this is not that > what it's doing requires special privilege (though it does). The > reason is that the utility itself is mostly evil. Most users > generally don't want people scanning subnets at high rates, looking > for hosts to attack.
We already have /usr/bin/nmap (not installed setuid though). -- Darren J Moffat
