SunOS and shared libraries, security aspects

[Jonathan I. Kamens]

In article <13340 at hydra.gatech.EDU>, gt0178a at prism.gatech.EDU (BURNS,JIM) writes:
|> Thanx, but I'm still a little confused - somehow, when you login to the
|> remote host, it has to set your uid. If rshd and rlogind don't use
|> setuid(3) (can't, if they aren't set-uid) to set your privileges, what
|> does?

  They don't have to be setuid to use setuid(3).  They have to run as root.

  If they are run by inetd, for example, they can be run as root even if they
are not setuid root, since inetd runs as root.

-- 
Jonathan Kamens			              USnail:
MIT Project Athena				11 Ashford Terrace
jik at Athena.MIT.EDU				Allston, MA  02134
Office: 617-253-8495			      Home: 617-782-0710