Re: xbru vulnerability

Theo Van Dinter (felicity@KLUGE.NET)
Sat, 08 Nov 1997 13:15:58 -0500

On Sat, 8 Nov 1997, Kyle Amon wrote:

| > It appears as though the program was NOT suppose to go out 777 -- rather
| > 1777. That little sticky bit of a difference provides for the security of
| > ownership. Thank you for bringing this to our attention.

Unless you want non-root users to do restores/backups, there's no problem in
making the perms non-world writeable. My /usr/local/lib/bru directory is
775, works fine (as expected) from root.

--
Randomly Generated Tagline:
Just a hunch; Murphy was an optimist.