Re: safe logging xterm

[adam () bwh harvard edu (Adam Shostack)]

| > Yes, it leaves setuid on a program that is way too large.  Xterm tends
| > to be setuid so it can write to utmp.  Thats a bad reason to make a
| > large program setuid.
| 
| Hm.  Why not make utmp group "bob" writable, and make xterm setgid "bob"?
| 
| just an idea...  at least it cuts down on what they can do if they
| somehow 'hack' xterm...the get "bob" access...

        Several kind folks pointed out to me that Xterm is setuid so
it can chown the pty, not so it can write to utmp.

Adam

-- 
"It is seldom that liberty of any kind is lost all at once."
                                                       -Hume