OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: format bugs, in addition to the wuftpd bug
From: Chris Evans (chrisferret.lmh.ox.ac.uk)
Date: Wed Jun 28 2000 - 07:20:50 CDT

On Wed, 28 Jun 2000, Olaf Kirch wrote:

> In the long run, statd should be replaced by a leaner mechanism. In the
> meanwhile it may be useful to make it drop privs at startup since it
> doesn't really need root or some such.

I've got a patch to sort the dropping of privs (you need to grab a low
socket first). I'll post it tonight, probably after investigating
chroot() as well.

Cheers
Chris