On Mon, Nov 06, 2000 at 01:04:18PM +1030, Brett Lymn wrote:
> 
> >You also appear to be laboring under the misconception that it would
> >be advisable to use setgid to the _same group_ to protect access to
> >the extracted setuid bits of our various setuid programs; this would
> >seem to me to be rather obviously not the right idea.
> >
> 
> Ah - ok.  In that case we will have zillions of groups to act as
> containers for the setuid portions of a program.

Have you looked at how many setuid programs we actually ship?  I suspect
that the number is a lot smaller than you think it is.

-- 
Thor Lancelot Simon	                                      tls@rek.tjls.com
	the effort to perceive simply the cruel radiance of what is