Subject: Re: /usr/games question
To: Isaac Wagner-Muns <fubar22@gmail.com>
From: Jeremy C. Reed <reed@reedmedia.net>
List: netbsd-users
Date: 12/26/2006 11:26:50
On Mon, 25 Dec 2006, Isaac Wagner-Muns wrote:

> can the games in /usr/games be used to compromise a system? they are  
> setuid, so i'm a little worried, and it never hurts to be paranoid! :)

They are not setuid. (And definitely not setuid root.)

A few are setgid "games". This is so they can keep data in /var/games/.

It is possible one game could be used to compromise the scores or data of 
another game :)