Subject: Re: [lists@globalintersec.com: [Global InterSec 2002041701] Sudo Password Prompt Vulnerability.]
To: Oleg Polyanski <Oleg.Polianski@clear.co.nz>
From: Rasputin <rasputin@submonkey.net>
List: tech-security
Date: 04/26/2002 11:12:11
* Oleg Polyanski <Oleg.Polianski@clear.co.nz> [020426 10:04]:

> woods@weird.com (Greg A. Woods) writes:
> 
> > A proper dedicated set-ID program that can't be mis-configured so
> > easily would be an almost infinitely better alternative than sudo.

>  Would you ever consider making the `umount(8)' program set-ID only
>  just to let somebody to unmount CD-ROM / floppy drive? 

That's not a dedicated program though is it?
A dedicated program would be a hardcoded version called
[u]mountcd  that only handled the cd drive; I can't see a problem with
that.

Ok, admittedly I didn't look hard...