Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Posting-Version: Notesfiles $Revision: 1.6.2.17 $; site uokvax.UUCP
Path: utzoo!watmath!clyde!burl!ulysses!mhuxr!ihnp4!inuxc!pur-ee!uiucdcs!uokvax!emks
From: emks@uokvax.UUCP
Newsgroups: net.unix-wizards
Subject: Re: Re: Findsuid source (Re: Security an
Message-ID: <6200045@uokvax.UUCP>
Date: Tue, 29-Jan-85 16:45:00 EST
Article-I.D.: uokvax.6200045
Posted: Tue Jan 29 16:45:00 1985
Date-Received: Sat, 2-Feb-85 00:16:00 EST
References: <327@lsuc.UUCP>
Lines: 9
Nf-ID: #R:lsuc:-32700:uokvax:6200045:37777777600:373
Nf-From: uokvax!emks    Jan 29 15:45:00 1985

Another problem with having a find-suid-programs program that runs based
on crontab entries is that anyone can see when the find-suid-programs
program is going to run next, and make their moves on that basis.

Perhaps /usr/lib/crontab should be mode 600...  But then one could always
check the last access time of the program, or look up the per-proc accounting.

		kurt