Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!sdd.hp.com!samsung!schizo!rosen From: rosen@solbourne.samsung.com (MFHorn) Newsgroups: comp.unix.wizards Subject: Re: special files as .plans? Message-ID: Date: 29 Aug 90 20:29:19 GMT References: <1990Aug24.224727.26823@boingo.med.jhu.edu> <7391@star.cs.vu.nl> <361@pacer.UUCP> <1990Aug28.214615.4265@ni.umd.edu> Sender: news@samsung.COM Reply-To: rosen@samsung.com Organization: Samsung Software America, Inc. Lines: 23 In-reply-to: louie@sayshell.umd.edu's message of 28 Aug 90 21:46:15 GMT In article <1990Aug28.214615.4265@ni.umd.edu> louie@sayshell.umd.edu (Louis A. Mamakos) writes: > Fingerd only runs as `root' on brain-damaged operating systems. If finger doesn't run as root, ~/.plan has to be world-readable, and ~/ has to be at least world-executable [comments on NFS brain damage omitted]. Some users may want to be more secure than this. Others may not know it needs to be like that and will wonder why nobody can see their plan or project. In the past (and probably on many systems today), finger ran as root because of this. The problem is that it did (does) not make sure .plan and .project are regular files (only) and are owned by the user being fingered. If you've got a broken finger (heh heh), it would be better to fix it and let it run as root (IMO). -- Andy Rosen | rosen@samsung.com | "I got this guitar Samsung Software America | ...!uunet!samsung!rosen | and I learned how One Corporate Drive | (508) 685-7200 | to make it talk" Andover, MA 01810 | | -Thunder Road