> ksh does a little dance to try and gift history files to their original owner
> if it's somehow running as a different user. this of course only works as
> root, and is probably a terrible idea.

When I found this with tame, I got worried about the implications of
how ksh is opening the file in the first place.  No *chown call should
be present in ksh!  

> ksh should simply refuse to open a history file that's owned by somebody else.

good policy.

ok deraadt

Reply via email to