Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!mnetor!uunet!husc6!hao!oddjob!gargoyle!ihnp4!chinet!nucsrl!gore From: gore@nucsrl.UUCP (Jacob Gore) Newsgroups: comp.unix.questions Subject: Re: SysV lp spooler a security hole Message-ID: <3680026@nucsrl.UUCP> Date: Mon, 7-Sep-87 21:23:20 EDT Article-I.D.: nucsrl.3680026 Posted: Mon Sep 7 21:23:20 1987 Date-Received: Wed, 9-Sep-87 02:43:48 EDT References: <313@pvab.UUCP> Organization: Northwestern U, Evanston IL, USA Lines: 13 / nucsrl:comp.unix.questions / robert@pvab.UUCP (Robert Claeson) / >The System V print spooler runs as a SUID 'lp' command, which >means that the files I want to print must be readable by others or, >if I'm lucky, by the group. This implies that anyone on the system >will be able to print, copy or read the files I want to be able >to print. In general, I agree with you, but in some cases this does the trick: lp < filename Jacob Gore gore@EECS.NWU.Edu Northwestern Univ., EECS Dept. {gargoyle,ihnp4,chinet}!nucsrl!gore