On Wed, Oct 29, 2014 at 11:54:41PM -0700, John Nemeth wrote: > On Oct 30, 6:13am, "David A. Holland" wrote: > } > } Module Name: src > } Committed By: dholland > } Date: Thu Oct 30 06:13:50 UTC 2014 > } > } Modified Files: > } src/usr.bin/rsh: rsh.c > } > } Log Message: > } Drop setuid before execing rlogin. Failure to do so should be > } harmless, but is sloppy. > > Uh... > > -r-xr-xr-x 1 root wheel 16303 Sep 18 17:35 /usr/bin/rsh*
-r-sr-xr-x 1 root wheel 16169 Sep 11 04:45 /bin/rcmd It doesn't *work* if not setuid. -- David A. Holland dholl...@netbsd.org