Subject: Re: Some general questions (xdm)
To: None <r.black@ic.ac.uk>
From: Sergio Monesi <msergio@mbox.vol.it>
List: port-arm32
Date: 01/05/1997 18:02:45
In message <9701031649.ZM24930@picasso.me> you wrote:

> > I recently tried to use xdm too, and if I do a 'shutdown' when xdm is
> > running the system goes down correctly but the 'reboot countdown' stops
> > at '1' and I have to use the reset button.
> What kernel? StrongARM?

sa110-4871

> > About the use of setdisplay, why can't I create a setuid root shell
> > script? I wanted to change to 1280x1024 from a common user and so I made
> > a shell script containing the setdisplay command and made it setuid root
> > but it still report 'permission denied' (or whatever). I had to make
> > setdisplay itself setuid root and now it does work.
> IMPORTANT: SUID SHELL SCRIPT ARE A SECURITY HOLE. This is why you can't
> have them. Making setdisplay seuid root probably at worst allows some
> denial of service attacks by allowing remote users to crash the display.
> The current console code really doesn't allow for good security models.

I believe there are a lot of ways to make shell SUID scripts secure, at least
there are for other Unix fashions (including SUN-OS/Solaris which says it
all...). Is this limitation a RiscBSD thing or is it a NetBSD problem and
will it be fixed?

> > Dec 30 15:45:12 riscbsd rpc.rstatd[422]: can't get namelist
> > Dec 30 15:50:02 riscbsd inetd[78]: /usr/libexec/rpc.rstatd: exit status 0x1
> I suspect you don't have your kernel image in /netbsd. Either that or you
> don't have the patch sets installed.

I am sure I have the kernel in /netbsd (ps and top do work) and I am also
almost sure I installed the two patch sets...

Bye,
Sergio

-- 
Sergio Monesi...
char *email[]={"msergio@mbox.vol.it","sergio@freebsd.first.gmd.de"};
char *www[]={"http://cdc8g5.cdc.polimi.it/~pel0015/"};
// God is real ... unless declared integer