Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

NetBSD master CVS tree commits



explorer
Sat Aug 10 16:09:21 EDT 1996
Update of /a/cvsroot/src/usr.sbin/lpr/lpr
In directory pain.lcs.mit.edu:/a/tmp/cvs-serv28985

Modified Files:
        lpr.c 
Log Message:
Fix printing over non-root-exported NFS at least.

The problem here is setuid(euid) is used far too much.  Since I removed
many of these calls, and added no new ones, I do not think this weakens
security.  In fact, it quite likely improves it quite a bit, since
access() is called as the real userid, and the file is opened for printing
as the real userid rather than the (setuid-root) effective one.




Home | Main Index | Thread Index | Old Index