Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

sun-lamp CVS commits



jtc
Sun Jun  4 16:48:24 EDT 1995
Update of /a/cvsroot/src/libexec/tftpd
In directory pain.lcs.mit.edu:/b/tmp/cvs-serv9230

Modified Files:
        tftpd.c 
Log Message:
The tftpd daemon must be invoked as root in order for the chroot()
call to succeed, and must give up those privledges as soon as the new
root has been aquired.  Use setgid() & setuid() to explicitly set the
user and group IDs to non- priveleged values.

This change now requires tftpd to be executed by root.  I haven't
studied the security implications of making it setuid root, so
inetd.conf needs to be changed to start it as root.




Home | Main Index | Thread Index | Old Index