I just emerge'd traceroute, dropped back to my normal user, and it didn't run. So, I checked the emerge messages and saw this:

<snip!>
* >>> SetUID: [chmod go-r] /var/tmp/portage/net-analyzer/traceroute-1.4_p12-r5/image//usr/sbin/traceroute ... [ ok ]
--- /usr/
--- /usr/sbin/
>>> /usr/sbin/traceroute
<snip!>

I can understand traceroute being setuid, but why put it in /usr/sbin so only root sees it? If we only want root to run it, it doesn't need to be setuid. It just doesn't make sense for a setuid application to only be directly available to root.

--
Jeff Walter
--
[EMAIL PROTECTED] mailing list

Reply via email to