Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!utgpu!water!watnot!watmath!clyde!rutgers!ames!amdcad!bandy From: bandy@amdcad.UUCP Newsgroups: comp.unix.wizards,comp.bugs.4bsd Subject: fascism Message-ID: <15947@amdcad.UUCP> Date: Fri, 3-Apr-87 17:55:51 EST Article-I.D.: amdcad.15947 Posted: Fri Apr 3 17:55:51 1987 Date-Received: Sun, 5-Apr-87 06:38:50 EST Reply-To: bandy@amdcad.AMD.COM (Andy Beals) Distribution: world Organization: Advanced Micro Devices, Sunnyvale, California Lines: 23 Xref: utgpu comp.unix.wizards:1657 comp.bugs.4bsd:265 Some sites who are paranoid about getting fingered for wasting computer resources on game-playing like to restrict access on things like netnews and other games, so when run programs out of the box (like rn) that don't setgid(getgid()), you end up seeing the message: csh: Permission denied I wasn't sufficiently bugged about it until today, but I did find the following hunk of code deep within .../bin/csh/sh.c if (!batch && (uid != geteuid() || getgid() != getegid())) { errno = EACCES; child++; /* So this ... */ Perror("csh"); /* ... doesn't return */ } Now why bother to put this in? Y'all didn't put a piece of equivalent code in /bin/sh. This is a very short-sighted approach to security. Anyway, how about publishing a diff to take this out, Keith? andy -- Andrew Scott Beals, {lll-crg,decwrl,allegra}!amdcad!bandy +1 408 749 3683