Re: Potential hole?

[Ken Jones]

The best solution i've seen is to group all the programs
that are possible security holes, like in.telnet and compilers,
to a new group. And only allow members of that group to execute
the programs.

Just like all the suid programs should be grouped.

It's a pretty standard security lockdown method.

Ken 
Inter7