Protecting against downloads

[Wm E. Davidsen Jr]

In article <epeterso.653316195 at houligan> epeterson at encore.com writes:

| As mentioned in another message, there is a program which can
| determine preprocessor symbols by digging them out of the cc binary,
| for which one has to have read permission on /bin/cc.  Also, if you're
| working on a program which dives into the kernel and nlist(3) out the
| addresses for its data structures, having read permission on the
| kernel is also helpful.

  Helpful to whom? It is not helpful to me to have any user do these
things. If there are programs which must read the kernel, after they are
debugged using dummy copies they can be setgid kmem (or sysinfo in SysV)
to allow access.
-- 
bill davidsen - davidsen at sixhub.uucp (uunet!crdgw1!sixhub!davidsen)
    sysop *IX BBS and Public Access UNIX
    moderator of comp.binaries.ibm.pc and 80386 mailing list
"Stupidity, like virtue, is its own reward" -me